InHand Networks

13 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-22597

  InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r…

  InHand Networks InRouter 302 InRouter 615
  Jan 12, 2023
• Medium 4.3
  CVE-2022-30543

  A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A…

  InHand Networks InRouter302
  Nov 9, 2022
• Medium 6.5
  CVE-2022-29888

  A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter3…

  InHand Networks InRouter302
  Nov 9, 2022
• Medium 4.9
  CVE-2022-29481

  A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A…

  InHand Networks InRouter302
  Nov 9, 2022
• Medium 6.5
  CVE-2022-28689

  A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45.…

  InHand Networks InRouter302
  Nov 9, 2022
• Medium 6.5
  CVE-2022-26023

  A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. …

  InHand Networks InRouter302
  Nov 9, 2022
• Medium 4.3
  CVE-2022-27172

  A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.3…

  InHand Networks InRouter302
  May 12, 2022
• Medium 6.3
  CVE-2022-26020

  An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRo…

  InHand Networks InRouter302
  May 12, 2022
• Medium 5.4
  CVE-2022-21238

  A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. …

  InHand Networks InRouter302
  May 12, 2022
• Medium 4.7
  CVE-2021-38472

  InHand Networks IR615 Router

  InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTIONS header, which an attacker may take advantage of by sending a link to an administrator that frames the router’s management portal and coul…

  InHand Networks IR615 Router
  Oct 19, 2021
• Medium 6.5
  CVE-2021-38476

  InHand Networks IR615 Router

  InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an attacker to enumerate different user accounts.

  InHand Networks IR615 Router
  Oct 19, 2021
• Medium 6.4
  CVE-2021-38464

  InHand Networks IR615 Router

  InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.

  InHand Networks IR615 Router
  Oct 19, 2021
• Medium 6.3
  CVE-2021-38474

  InHand Networks IR615 Router

  InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. This may allow an attacker to execute a brute-force password attack with no time limitation and without harmin…

  InHand Networks IR615 Router
  Oct 19, 2021