Vulnerability index

Browse CVEs

61 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Inrouter302 Firmware HIGH 8.1
CVE-2022-21809

A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can l…

Fix: after 3.5.37
Fix from $1,950 2022-05-12
Ir302 Firmware HIGH 7.2
CVE-2022-26002

A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted ne…

No fix yet
Fix from $1,950 2022-05-12
Ir302 Firmware HIGH 7.2
CVE-2022-26007EPSS 6%

An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network …

No fix yet
Fix from $1,950 2022-05-12
Ir302 Firmware MEDIUM 6.7
CVE-2022-24910

A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted fi…

Fix: after 3.5.37
Fix from $1,600 2022-05-12
Ir302 Firmware MEDIUM 6.5
CVE-2022-26020

An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4. A specially-cr…

No fix yet
Fix from $1,600 2022-05-12
Ir302 Firmware MEDIUM 6.5
CVE-2022-26510

A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted HTTP re…

No fix yet
Fix from $1,600 2022-05-12
Inrouter302 Firmware MEDIUM 6.1
CVE-2022-21238

A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP reque…

Fix: after 3.5.37
Fix from $1,600 2022-05-12
Ir302 Firmware MEDIUM 6.1
CVE-2022-25172

An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4. The session c…

Fix: after 3.5.4
Fix from $1,600 2022-05-12
Inrouter302 Firmware HIGH 8.8
CVE-2022-21182

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. A specially-craft…

Fix: after 3.5.4
Fix from $1,950 2022-05-12
Inrouter 900 Firmware CRITICAL 9.8
CVE-2022-27268

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the …

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware CRITICAL 9.8
CVE-2022-27269

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the …

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware CRITICAL 9.8
CVE-2022-27270

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the …

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware CRITICAL 9.8
CVE-2022-27271

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the …

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware CRITICAL 9.8
CVE-2022-27272

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the …

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware CRITICAL 9.8
CVE-2022-27273

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the …

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware CRITICAL 9.8
CVE-2022-27274

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the …

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware CRITICAL 9.8
CVE-2022-27275

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the …

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware CRITICAL 9.8
CVE-2022-27276

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the …

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware CRITICAL 9.1
CVE-2022-27277

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the fun…

Fix: 1.0.0.r11700+
Fix from $2,300 2022-04-10
Inrouter 900 Firmware HIGH 7.5
CVE-2022-27279

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub_177E0.

Fix: 1.0.0.r11700+
Fix from $1,950 2022-04-10
Inrouter 900 Firmware MEDIUM 5.4
CVE-2022-27280

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting (XSS) vulnerability vi…

Fix: 1.0.0.r11700+
Fix from $1,600 2022-04-10
Ir615 Firmware CRITICAL 9.8
CVE-2021-38474

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. …

Mitigation only
Fix from $2,300 2021-10-19
Ir615 Firmware CRITICAL 9.1
CVE-2021-38470

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the devic…

Mitigation only
Fix from $2,300 2021-10-19
Ir615 Firmware CRITICAL 9.1
CVE-2021-38478

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the…

Mitigation only
Fix from $2,300 2021-10-19
Ir615 Firmware HIGH 8.8
CVE-2021-38480

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submi…

Mitigation only
Fix from $1,950 2021-10-19
Ir615 Firmware HIGH 8.5
CVE-2021-38486

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any req…

Mitigation only
Fix from $1,950 2021-10-19
Ir615 Firmware HIGH 7.2
CVE-2021-38484

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicio…

Mitigation only
Fix from $1,950 2021-10-19
Ir615 Firmware MEDIUM 5.3
CVE-2021-38476

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a userna…

Mitigation only
Fix from $1,600 2021-10-19
Ir615 Firmware CRITICAL 9.8
CVE-2021-38462

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with ob…

Mitigation only
Fix from $2,300 2021-10-19
Ir615 Firmware HIGH 7.4
CVE-2021-38464

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the…

No fix yet
Fix from $1,950 2021-10-19