# cve.now: Inhand Networks

The newest entries naming Inhand Networks as an affected vendor (up to 200), of 43 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-22601](https://cve.now/CVE-2023-22601.md): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulner (CVSS 10.0)
- [CVE-2023-22600](https://cve.now/CVE-2023-22600.md): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulner (CVSS 10.0)
- [CVE-2023-22599](https://cve.now/CVE-2023-22599.md): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulner (CVSS 7.0)
- [CVE-2023-22598](https://cve.now/CVE-2023-22598.md): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulner (CVSS 7.2)
- [CVE-2023-22597](https://cve.now/CVE-2023-22597.md): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulner (CVSS 6.5)
- [CVE-2022-30543](https://cve.now/CVE-2022-30543.md): A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. (CVSS 4.3)
- [CVE-2022-29888](https://cve.now/CVE-2022-29888.md): A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45. (CVSS 6.5)
- [CVE-2022-29481](https://cve.now/CVE-2022-29481.md): A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. (CVSS 4.9)
- [CVE-2022-28689](https://cve.now/CVE-2022-28689.md): A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45. (CVSS 6.5)
- [CVE-2022-26023](https://cve.now/CVE-2022-26023.md): A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. (CVSS 6.5)
- [CVE-2022-25932](https://cve.now/CVE-2022-25932.md): The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474. (CVSS 7.4)
- [CVE-2022-27172](https://cve.now/CVE-2022-27172.md): A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. (CVSS 4.3)
- [CVE-2022-26782](https://cve.now/CVE-2022-26782.md): Multiple improper input validation vulnerabilities exists in the libnvram.so nvram\_import functionality of InHand Networks InRouter302 V3.5. (CVSS 9.9)
- [CVE-2022-26781](https://cve.now/CVE-2022-26781.md): Multiple improper input validation vulnerabilities exists in the libnvram.so nvram\_import functionality of InHand Networks InRouter302 V3.5. (CVSS 9.9)
- [CVE-2022-26780](https://cve.now/CVE-2022-26780.md): Multiple improper input validation vulnerabilities exists in the libnvram.so nvram\_import functionality of InHand Networks InRouter302 V3.5. (CVSS 9.9)
- [CVE-2022-26518](https://cve.now/CVE-2022-26518.md): An OS command injection vulnerability exists in the console infactory\_net functionality of InHand Networks InRouter302 V3.5.37. (CVSS 9.9)
- [CVE-2022-26510](https://cve.now/CVE-2022-26510.md): A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. (CVSS 9.9)
- [CVE-2022-26420](https://cve.now/CVE-2022-26420.md): An OS command injection vulnerability exists in the console infactory\_port functionality of InHand Networks InRouter302 V3.5.37. (CVSS 9.9)
- [CVE-2022-26085](https://cve.now/CVE-2022-26085.md): An OS command injection vulnerability exists in the httpd wlscan\_ASP functionality of InHand Networks InRouter302 V3.5.4. (CVSS 9.9)
- [CVE-2022-26075](https://cve.now/CVE-2022-26075.md): An OS command injection vulnerability exists in the console infactory\_wlan functionality of InHand Networks InRouter302 V3.5.37. (CVSS 9.9)
- [CVE-2022-26042](https://cve.now/CVE-2022-26042.md): An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. (CVSS 9.9)
- [CVE-2022-26020](https://cve.now/CVE-2022-26020.md): An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4. (CVSS 6.3)
- [CVE-2022-26007](https://cve.now/CVE-2022-26007.md): An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. (CVSS 9.1)
- [CVE-2022-26002](https://cve.now/CVE-2022-26002.md): A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. (CVSS 9.1)
- [CVE-2022-25995](https://cve.now/CVE-2022-25995.md): A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. (CVSS 9.9)
- [CVE-2022-25172](https://cve.now/CVE-2022-25172.md): An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4. (CVSS 7.5)
- [CVE-2022-24910](https://cve.now/CVE-2022-24910.md): A buffer overflow vulnerability exists in the httpd parse\_ping\_result API functionality of InHand Networks InRouter302 V3.5.4. (CVSS 8.2)
- [CVE-2022-21809](https://cve.now/CVE-2022-21809.md): A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. (CVSS 9.9)
- [CVE-2022-21238](https://cve.now/CVE-2022-21238.md): A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. (CVSS 5.4)
- [CVE-2022-21182](https://cve.now/CVE-2022-21182.md): A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. (CVSS 7.4)
- [CVE-2021-38486](https://cve.now/CVE-2021-38486.md): InHand Networks IR615 Router (CVSS 8.0)
- [CVE-2021-38478](https://cve.now/CVE-2021-38478.md): InHand Networks IR615 Router (CVSS 9.1)
- [CVE-2021-38480](https://cve.now/CVE-2021-38480.md): InHand Networks IR615 Router (CVSS 9.6)
- [CVE-2021-38484](https://cve.now/CVE-2021-38484.md): InHand Networks IR615 Router (CVSS 9.1)
- [CVE-2021-38482](https://cve.now/CVE-2021-38482.md): InHand Networks IR615 Router (CVSS 8.7)
- [CVE-2021-38472](https://cve.now/CVE-2021-38472.md): InHand Networks IR615 Router (CVSS 4.7)
- [CVE-2021-38476](https://cve.now/CVE-2021-38476.md): InHand Networks IR615 Router (CVSS 6.5)
- [CVE-2021-38462](https://cve.now/CVE-2021-38462.md): InHand Networks IR615 Router (CVSS 9.8)
- [CVE-2021-38466](https://cve.now/CVE-2021-38466.md): InHand Networks IR615 Router (CVSS 8.8)
- [CVE-2021-38464](https://cve.now/CVE-2021-38464.md): InHand Networks IR615 Router (CVSS 6.4)
- [CVE-2021-38468](https://cve.now/CVE-2021-38468.md): InHand Networks IR615 Router (CVSS 8.7)
- [CVE-2021-38470](https://cve.now/CVE-2021-38470.md): InHand Networks IR615 Router (CVSS 9.1)
- [CVE-2021-38474](https://cve.now/CVE-2021-38474.md): InHand Networks IR615 Router (CVSS 6.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/inhand-networks
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.