Vulnerability Details CVE-2022-25932
The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474. The fixes are incomplete. An attacker can still perform, respectively, a privilege escalation and an information disclosure vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.2%
CVSS Severity
CVSS v3 Score 7.4
References
Products affected by CVE-2022-25932
-
cpe:2.3:h:inhandnetworks:inrouter302:-
-
cpe:2.3:o:inhandnetworks:inrouter302_firmware:-
-
cpe:2.3:o:inhandnetworks:inrouter302_firmware:3.5.37
-
cpe:2.3:o:inhandnetworks:inrouter302_firmware:3.5.4
-
cpe:2.3:o:inhandnetworks:inrouter302_firmware:3.5.45