Skip to content
OpenAdvisories
Critical · 9.9 CVE-2022-21809 EUVD-2022-26970GHSA-399c-25pm-72mj

A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP req…

Published May 12, 2022 · Updated Apr 15, 2025 · Assigned by talos

Vendor: InHand Networks Product: InRouter302

Description

A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can upload a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
InHand Networks InRouter302 V3.5.4 —

References