CVE-2022-25932
7.4
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Summary
The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474. The fixes are incomplete. An attacker can still perform, respectively, a privilege escalation and an information disclosure vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| InHand Networks | InRouter302 | V3.5.45 | affected |
Weaknesses
- CWE-284: CWE-284: Improper Access Control
ADP Enrichment
CVE Program Container
Additional References
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1523
- https://inhandnetworks.com/upload/attachment/202210/25/InHand-PSA-2022-02.pdf
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1523
- https://inhandnetworks.com/upload/attachment/202210/25/InHand-PSA-2022-02.pdf
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.