Vendor
InHand Networks
43 known vulnerabilities.
InHand Networks at a glance
- Last 12 months
- 0
- Critical · all time
- 20
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Latest advisories
-
Critical max 10.0ICSA-23-012-03 5 CVEs
InHand Networks InRouter
Successful exploitation of these vulnerabilities could allow a message queuing telemetry transport (MQTT) command injection, unauthorized disclosure of sensitive device information, and remote code execution. If properly chained, these vulnerabilities could r…
-
Critical max 9.8
InHand Networks IR615 Router (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to have full control over the product, remotely perform actions on the product, intercept communication and steal sensitive information, session hijacking, and successful brute-force again…
first Oct 7, 2021
43 results · Feed
-
Critical 10.0
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r…
-
Critical 10.0
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r…
-
High 7.0
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r…
-
High 7.2
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r…
-
Medium 6.5
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r…
-
Medium 4.3
A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A…
-
Medium 6.5
A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter3…
-
Medium 4.9
A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A…
-
Medium 6.5
A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45.…
-
Medium 6.5
A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. …
-
High 7.4
The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474. The fixes…
-
Medium 4.3
A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.3…
-
Critical 9.9
Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Netwo…
-
Critical 9.9
Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Netwo…
-
Critical 9.9
Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Netwo…
-
Critical 9.9
An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 …
-
Critical 9.9
A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.3…
-
Critical 9.9
An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302…
-
Critical 9.9CVE-2022-26085 EPSS 13%
An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.…
-
Critical 9.9
An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302…
-
Critical 9.9
An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.…
-
Medium 6.3
An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRo…
-
Critical 9.1
An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4…
-
Critical 9.1
A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 …
-
Critical 9.9
A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A s…
-
High 7.5
An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InR…
-
High 8.2
A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 …
-
Critical 9.9
A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specia…
-
Medium 5.4
A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. …
-
High 7.4
A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRoute…
-
High 8.0
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an attacker to have full control over the product and execute …
-
Critical 9.1
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device.
-
Critical 9.6
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web application trusts. This may allow an attacker to remotely perform actions on the rou…
-
Critical 9.1
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which may allow an attacker, acting as an administrator, to upload malicious files. Th…
-
High 8.7
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scripting, which may allow an attacker to hijack sessions of users connected to the system.
-
Medium 4.7
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTIONS header, which an attacker may take advantage of by sending a link to an administrator that frames the router’s management portal and coul…
-
Medium 6.5
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an attacker to enumerate different user accounts.
-
Critical 9.8
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform operations …
-
High 8.8
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an attacker …
-
Medium 6.4
InHand Networks IR615 Router
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.