InHand Networks IR302 Firmware 3.5.37
Approved changes feed: RSS · Atom
cpe:2.3:o:inhandnetworks:ir302_firmware:3.5.37:*:*:*:*:*:*:*
part: o version: 3.5.37 update: *
| Vendor | Inhandnetworks (07cf40b4-3dc4-50e1-8e2f-d0b1a8dd1c3f) |
|---|---|
| Product | Ir302 Firmware (c2a448c9-a1a7-5d52-9f81-9b91c71849ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-26518 |
vulnerable | 2026-06-08 05:41:52.322797 |
Details available
CRITICAL (9.9)
An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
Published: 2022-05-12T17:01:49.718Z
Updated: 2025-04-15T19:02:08.321Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26510 |
vulnerable | 2026-06-08 05:41:52.307567 |
Details available
CRITICAL (9.9)
A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability.
Published: 2022-05-12T17:01:48.207Z
Updated: 2025-04-15T19:02:14.358Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26420 |
vulnerable | 2026-06-08 05:41:51.960422 |
Details available
CRITICAL (9.9)
An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
Published: 2022-05-12T17:01:46.771Z
Updated: 2025-04-15T19:02:22.509Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26085 |
vulnerable | 2026-06-08 05:41:50.512731 |
Details available
CRITICAL (9.9)
An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2022-05-12T17:01:45.298Z
Updated: 2025-04-15T19:02:29.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26075 |
vulnerable | 2026-06-08 05:41:50.489861 |
Details available
CRITICAL (9.9)
An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
Published: 2022-05-12T17:01:43.811Z
Updated: 2025-04-15T19:02:37.604Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26042 |
vulnerable | 2026-06-08 05:41:50.048914 |
Details available
CRITICAL (9.9)
An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
Published: 2022-05-12T17:01:42.301Z
Updated: 2025-04-15T19:02:44.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26020 |
vulnerable | 2026-06-08 05:41:50.010229 |
Details available
MEDIUM (6.3)
An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.
Published: 2022-05-12T17:01:40.860Z
Updated: 2025-04-15T19:02:52.021Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.