Known vulnerabilities in InRouter302

Vendor: InHand Networks
Software: InRouter302
Software CPE: cpe:2.3:h:inhand_networks:inrouter302:*:*:*:*:*:*:*:*
Website: https://www.inhandnetworks.com/
Total vulnerabilities: 24
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting InRouter302 InRouter302 is affected by 24 known vulnerabilities: 1 high, 17 medium, 6 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71154 - Use of Insufficiently Random Values
CVE-2023-22601		 CWE-330 Medium
No
No
 3.5.56 13.01.2023 SB2023011314
#VU71153 - Improper Access Control
CVE-2023-22600		 CWE-284 High
No
No
 3.5.56 13.01.2023 SB2023011314
#VU71152 - Use of a One-Way Hash with a Predictable Salt
CVE-2023-22599		 CWE-760 Medium
No
No
 3.5.56 13.01.2023 SB2023011314
#VU71150 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-22598		 CWE-78 Low
No
No
 3.5.56 13.01.2023 SB2023011314
#VU71149 - Cleartext Transmission of Sensitive Information
CVE-2023-22597		 CWE-319 Medium
No
No
 3.5.56 13.01.2023 SB2023011314
#VU63221 - Sensitive Cookie Without 'HttpOnly' Flag
CVE-2022-25172		 CWE-1004 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63220 - Stack-based buffer overflow
CVE-2022-26782		 CWE-121 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63219 - Stack-based buffer overflow
CVE-2022-26781		 CWE-121 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63218 - Stack-based buffer overflow
CVE-2022-26780		 CWE-121 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63217 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26075		 CWE-78 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63214 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26420		 CWE-78 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63213 - Active Debug Code
CVE-2022-25995		 CWE-489 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63212 - Use of Hard-coded Cryptographic Key
CVE-2022-26020		 CWE-321 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63211 - Insecure Temporary File
CVE-2022-21809		 CWE-377 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63210 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26007		 CWE-78 Low
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63209 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26085		 CWE-78 Medium
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63208 - Stack-based buffer overflow
CVE-2022-26002		 CWE-121 Low
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63207 - Use of Hard-coded Password
CVE-2022-27172		 CWE-259 Low
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63206 - Memory corruption
CVE-2022-24910		 CWE-119 Low
No
No
 3.5.45 16.05.2022 SB2022051611
#VU63205 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-26518		 CWE-78 Medium
No
No
 3.5.45 16.05.2022 SB2022051611


Showing elements 1 - 20 out of 24