InHand Networks InRouter302

Name: InHand Networks InRouter302
Brand: InHand Networks

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

2critical20high8medium0low

updated 2026-10-28

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-26085US	high8.8	12.7% (96th)	—	no fix	2022-05-12	2 versions
CVE-2022-26042US	high8.8	8.61% (95th)	—	no fix	2022-05-12	2 versions
CVE-2022-26420US	high8.8	5.92% (93rd)	—	no fix	2022-05-12	≤ V3.5.37
CVE-2022-26075US	high8.8	5.92% (93rd)	—	no fix	2022-05-12	≤ V3.5.37
CVE-2022-26007US	high7.2	5.45% (93rd)	—	no fix	2022-05-12	≤ V3.5.4
CVE-2022-26518US	high8.8	4.85% (92nd)	—	no fix	2022-05-12	≤ V3.5.37
CVE-2022-26002US	high7.2	3.41% (89th)	—	no fix	2022-05-12	2 versions
CVE-2022-26782US	high8.8	3.29% (88th)	—	no fix	2022-05-12	≤ V3.5.4
CVE-2022-26780US	high8.8	3.29% (88th)	—	no fix	2022-05-12	≤ V3.5.4
CVE-2022-26781US	high8.8	2.94% (87th)	—	no fix	2022-05-12	≤ V3.5.4
CVE-2022-25995US	high8.8OT elevated	2.86% (87th)	—	no fix	2022-05-12	2 versions
CVE-2022-21182US	high8.8	1.97% (80th)	—	no fix	2022-05-12	2 versions
CVE-2022-21809US	high8.1	1.82% (79th)	—	no fix	2022-05-12	2 versions
CVE-2023-22598US	high7.2	1.71% (77th)	—	no fix	2023-01-12	≤ 3.5.56
CVE-2022-29888US	high8.1OT elevated	1.57% (75th)	—	no fix	2022-11-09	≤ V3.5.45
CVE-2022-21238US	medium6.1	1.54% (75th)	—	no fix	2022-05-12	2 versions
CVE-2022-24910US	medium6.7	1.34% (71st)	—	no fix	2022-05-12	2 versions
CVE-2022-26510US	medium6.5	1.31% (70th)	—	no fix	2022-05-12	2 versions
CVE-2022-27172US	high8.8OT elevated	1.08% (65th)	—	no fix	2022-05-12	2 versions
CVE-2022-25172US	medium6.1	1.03% (64th)	—	no fix	2022-05-12	≤ V3.5.4
CVE-2022-28689US	high8.8OT elevated	0.97% (62nd)	—	no fix	2022-11-09	≤ V3.5.45
CVE-2022-30543US	high8.8OT elevated	0.93% (60th)	—	no fix	2022-11-09	≤ V3.5.45
CVE-2022-26023US	medium6.5OT elevated	0.83% (57th)	—	no fix	2022-11-09	≤ V3.5.45
CVE-2022-29481US	medium6.5OT elevated	0.82% (57th)	—	no fix	2022-11-09	≤ V3.5.45
CVE-2022-25932US	critical9.8	0.68% (52nd)	—	no fix	2022-11-09	≤ V3.5.45
CVE-2022-26020US	medium6.5OT elevated	0.68% (52nd)	—	no fix	2022-05-12	2 versions
CVE-2023-22601US	high8.6OT elevated	0.58% (47th)	—	no fix	2023-01-12	≤ 3.5.56
CVE-2023-22597US	medium5.9OT elevated	0.53% (45th)	—	no fix	2023-01-12	≤ 3.5.56
CVE-2023-22600US	high8.1	0.51% (43rd)	—	no fix	2023-01-12	≤ 3.5.56
CVE-2023-22599US	critical9.1	0.33% (26th)	—	no fix	2023-01-12	≤ 3.5.56

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7 CVEs
CWE-489Active Debug Code6 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-1004Sensitive Cookie Without 'HttpOnly' Flag1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)25 CVEs
RUBDU (FSTEC Data Security Threats Database)16 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan