Login Request a demo
IN
Vendor
Inhandnetworks
9 products with CVEs on record
86
CVEs
0
On KEV
0
New 30D
Products
IF
Ir302 Firmware
Inhandnetworks
9.8
25 CVEs0 on KEV0 new
IF
Ir615 Firmware
Inhandnetworks
9.8
17 CVEs0 on KEV0 new
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
12 CVEs0 on KEV0 new
IF
Inrouter302 Firmware
Inhandnetworks
9.8
9 CVEs0 on KEV0 new
IF
Inrouter615-s Firmware
Inhandnetworks
9.1
5 CVEs0 on KEV0 new
IF
Ir912l-fq58 Firmware
Inhandnetworks
9.8
5 CVEs0 on KEV0 new
IF
Ir915l-fq39-s Firmware
Inhandnetworks
9.8
5 CVEs0 on KEV0 new
IF
Ir305 Firmware
Inhandnetworks
9.8
4 CVEs0 on KEV0 new
IF
Ir315 Firmware
Inhandnetworks
9.8
4 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-38714
IF
Ir915l-fq39-s Firmware
Inhandnetworks
9.8
2%
Jun 18InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python configuration…
CVE-2026-38718
IF
Ir915l-fq39-s Firmware
Inhandnetworks
7.5
0%
Jun 18InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a buffer overflow vulnerability in the device registration…
CVE-2026-38717
IF
Ir915l-fq39-s Firmware
Inhandnetworks
9.8
2%
Jun 18InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the file upload function
CVE-2026-38716
IF
Ir915l-fq39-s Firmware
Inhandnetworks
9.8
2%
Jun 18InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python application…
CVE-2026-38715
IF
Ir915l-fq39-s Firmware
Inhandnetworks
9.8
2%
Jun 18InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the log viewing function
CVE-2026-38703
IF
Ir315 Firmware
Inhandnetworks
9.8
1%
May 28A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware…
CVE-2026-38707
IF
Ir315 Firmware
Inhandnetworks
9.8
1%
May 28A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware…
CVE-2026-38704
IF
Ir315 Firmware
Inhandnetworks
9.8
1%
May 28A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware…
CVE-2026-38702
IF
Ir315 Firmware
Inhandnetworks
9.8
1%
May 28A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware…
CVE-2023-22601
IF
Inrouter302 Firmware
Inhandnetworks
8.6
1%
Jan 12InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently…
CVE-2023-22600
IF
Inrouter302 Firmware
Inhandnetworks
8.1
1%
Jan 12InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control
CVE-2023-22599
IF
Inrouter302 Firmware
Inhandnetworks
9.1
0%
Jan 12InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash…
CVE-2023-22598
IF
Inrouter302 Firmware
Inhandnetworks
7.2
2%
Jan 12InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization…
CVE-2023-22597
IF
Inrouter302 Firmware
Inhandnetworks
5.9
1%
Jan 12InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission…
CVE-2022-30543
IF
Ir302 Firmware
Inhandnetworks
8.8
1%
Nov 9A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45
CVE-2022-29888
IF
Ir302 Firmware
Inhandnetworks
8.1
2%
Nov 9A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45
CVE-2022-29481
IF
Ir302 Firmware
Inhandnetworks
6.5
1%
Nov 9A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45
CVE-2022-28689
IF
Ir302 Firmware
Inhandnetworks
8.8
1%
Nov 9A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45
CVE-2022-26023
IF
Ir302 Firmware
Inhandnetworks
6.5
1%
Nov 9A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45
CVE-2022-25932
IF
Inrouter302 Firmware
Inhandnetworks
9.8
1%
Nov 9The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474
CVE-2022-27172
IF
Ir302 Firmware
Inhandnetworks
8.8
1%
May 12A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37
CVE-2022-26782
IF
Ir302 Firmware
Inhandnetworks
8.8
3%
May 12Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-26781
IF
Ir302 Firmware
Inhandnetworks
8.8
3%
May 12Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-26780
IF
Ir302 Firmware
Inhandnetworks
8.8
3%
May 12Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-26518
IF
Ir302 Firmware
Inhandnetworks
8.8
5%
May 12An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37
CVE-2022-26510
IF
Ir302 Firmware
Inhandnetworks
6.5
1%
May 12A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37
CVE-2022-26420
IF
Ir302 Firmware
Inhandnetworks
8.8
6%
May 12An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37
CVE-2022-26085
IF
Ir302 Firmware
Inhandnetworks
8.8
13%
May 12An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-26075
IF
Ir302 Firmware
Inhandnetworks
8.8
6%
May 12An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37
CVE-2022-26042
IF
Ir302 Firmware
Inhandnetworks
8.8
9%
May 12An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-26020
IF
Ir302 Firmware
Inhandnetworks
6.5
1%
May 12An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-26007
IF
Ir302 Firmware
Inhandnetworks
7.2
5%
May 12An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-26002
IF
Ir302 Firmware
Inhandnetworks
7.2
3%
May 12A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-25995
IF
Ir302 Firmware
Inhandnetworks
8.8
3%
May 12A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-25172
IF
Ir302 Firmware
Inhandnetworks
6.1
1%
May 12An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-24910
IF
Ir302 Firmware
Inhandnetworks
6.7
1%
May 12A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-21809
IF
Inrouter302 Firmware
Inhandnetworks
8.1
2%
May 12A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-21238
IF
Inrouter302 Firmware
Inhandnetworks
6.1
2%
May 12A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-21182
IF
Inrouter302 Firmware
Inhandnetworks
8.8
2%
May 12A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4
CVE-2022-27280
I9
Inrouter 900 Firmware
Inhandnetworks
5.4
1%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the web_exec parameter at…
CVE-2022-27279
I9
Inrouter 900 Firmware
Inhandnetworks
7.5
2%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub_177E0
CVE-2022-27277
I9
Inrouter 900 Firmware
Inhandnetworks
9.1
1%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub_17C08
CVE-2022-27276
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
4%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_10F2C
CVE-2022-27275
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
3%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_122D0
CVE-2022-27274
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
3%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12028
CVE-2022-27273
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
3%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12168
CVE-2022-27272
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
3%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_1791C
CVE-2022-27271
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
3%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component python-lib
CVE-2022-27270
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
3%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component ipsec_secrets
CVE-2022-27269
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
4%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component config_ovpn
CVE-2022-27268
I9
Inrouter 900 Firmware
Inhandnetworks
9.8
4%
Apr 10InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component get_cgi_from_memory
CVE-2021-38486
IF
Ir615 Firmware
Inhandnetworks
8.5
1%
Oct 19InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an…
CVE-2021-38484
IF
Ir615 Firmware
Inhandnetworks
7.2
3%
Oct 19InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which…
CVE-2021-38482
IF
Ir615 Firmware
Inhandnetworks
4.8
1%
Oct 19InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scripting, which may allow an attacker to…
CVE-2021-38480
IF
Ir615 Firmware
Inhandnetworks
8.8
1%
Oct 19InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web…
CVE-2021-38478
IF
Ir615 Firmware
Inhandnetworks
9.1
1%
Oct 19InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device
CVE-2021-38476
IF
Ir615 Firmware
Inhandnetworks
5.3
1%
Oct 19InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username
CVE-2021-38474
IF
Ir615 Firmware
Inhandnetworks
9.8
1%
Oct 19InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product
CVE-2021-38472
IF
Ir615 Firmware
Inhandnetworks
4.7
1%
Oct 19InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTIONS header, which an attacker may take advantage of by…
CVE-2021-38470
IF
Ir615 Firmware
Inhandnetworks
9.1
1%
Oct 19InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device