Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-28689 EUVD-2022-33131GHSA-j956-v3jj-36f8

A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted…

Published Nov 9, 2022 · Updated Apr 15, 2025 · Assigned by talos

Vendor: InHand Networks Product: InRouter302

Description

A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
InHand Networks InRouter302 V3.5.45 —

References