Inhandnetworks Inrouter302 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Inhandnetworks Inrouter302 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2023-22601 — CVSS 10.0 (critical): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain…
• CVE-2023-22600 — CVSS 10.0 (critical): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain…
• CVE-2022-25932 — CVSS 9.8 (critical): The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474. The fixes are incomplete. An…
• CVE-2022-21182 — CVSS 8.8 (high): A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. A…
• CVE-2022-21809 — CVSS 8.1 (high): A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP…
• CVE-2023-22598 — CVSS 7.2 (high): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain…
• CVE-2023-22599 — CVSS 7.0 (high): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain…
• CVE-2023-22597 — CVSS 6.5 (medium): InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain…
• CVE-2022-21238 — CVSS 6.1 (medium): A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted…