IF
Product
Ir302 Firmware
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 15Medium 6Low 0
Watch
Add Ir302 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-38703 | 9.8 | May 28 | A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware… Affected: before 3.5.112 |
| CVE-2026-38707 | 9.8 | May 28 | A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware… Affected: before 3.5.112 |
| CVE-2026-38704 | 9.8 | May 28 | A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware… Affected: before 3.5.112 |
| CVE-2026-38702 | 9.8 | May 28 | A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware… Affected: before 3.5.112 |
| CVE-2022-30543 | 8.8 | Nov 9 | A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45 Affected: 3.5.45 |
| CVE-2022-28689 | 8.8 | Nov 9 | A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45 Affected: 3.5.45 |
| CVE-2022-27172 | 8.8 | May 12 | A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37 Affected: through 3.5.37 |
| CVE-2022-26782 | 8.8 | May 12 | Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4 Affected: through 3.5.37 |
| CVE-2022-26781 | 8.8 | May 12 | Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4 Affected: through 3.5.37 |
| CVE-2022-26780 | 8.8 | May 12 | Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4 Affected: through 3.5.37 |
| CVE-2022-26518 | 8.8 | May 12 | An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37 Affected: 3.5.37 |
| CVE-2022-26420 | 8.8 | May 12 | An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37 Affected: 3.5.37 |
| CVE-2022-26085 | 8.8 | May 12 | An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4 Affected: 3.5.37 |
| CVE-2022-26075 | 8.8 | May 12 | An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37 Affected: 3.5.37 |
| CVE-2022-26042 | 8.8 | May 12 | An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4 Affected: 3.5.37 |
| CVE-2022-25995 | 8.8 | May 12 | A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4 Affected: 3.5.4 |
| CVE-2022-29888 | 8.1 | Nov 9 | A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45 Affected: 3.5.45 |
| CVE-2022-26007 | 7.2 | May 12 | An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4 Affected: 3.5.4 |
| CVE-2022-26002 | 7.2 | May 12 | A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4 Affected: 3.5.4 |
| CVE-2022-24910 | 6.7 | May 12 | A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4 Affected: through 3.5.37 |
| CVE-2022-29481 | 6.5 | Nov 9 | A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45 Affected: 3.5.45 |
| CVE-2022-26023 | 6.5 | Nov 9 | A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45 Affected: 3.5.45 |
| CVE-2022-26510 | 6.5 | May 12 | A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37 Affected: 3.5.37 |
| CVE-2022-26020 | 6.5 | May 12 | An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4 Affected: 3.5.37 |
| CVE-2022-25172 | 6.1 | May 12 | An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4 Affected: through 3.5.4 |
Showing 25