inhandnetworks ir302 firmware

Name: inhandnetworks ir302 firmware
Brand: inhandnetworks

productUS

cpe:2.3:o:inhandnetworks:ir302_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

critical

by severity

0critical15high6medium0low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-26085US	high8.8	12.7% (96th)	—	no fix	2022-05-12	= 3.5.37
CVE-2022-26042US	high8.8	8.61% (95th)	—	no fix	2022-05-12	= 3.5.37
CVE-2022-26420US	high8.8	5.92% (93rd)	—	no fix	2022-05-12	= 3.5.37
CVE-2022-26075US	high8.8	5.92% (93rd)	—	no fix	2022-05-12	= 3.5.37
CVE-2022-26007US	high7.2	5.45% (93rd)	—	no fix	2022-05-12	= 3.5.4
CVE-2022-26518US	high8.8	4.85% (92nd)	—	no fix	2022-05-12	= 3.5.37
CVE-2022-26002US	high7.2	3.41% (89th)	—	no fix	2022-05-12	= 3.5.4
CVE-2022-26782US	high8.8	3.29% (88th)	—	no fix	2022-05-12	≤ 3.5.37
CVE-2022-26780US	high8.8	3.29% (88th)	—	no fix	2022-05-12	≤ 3.5.37
CVE-2022-26781US	high8.8	2.94% (87th)	—	no fix	2022-05-12	≤ 3.5.37
CVE-2022-25995US	high8.8OT elevated	2.86% (87th)	—	no fix	2022-05-12	= 3.5.4
CVE-2022-29888US	high8.1OT elevated	1.57% (75th)	—	no fix	2022-11-09	= 3.5.45
CVE-2022-24910US	medium6.7	1.34% (71st)	—	no fix	2022-05-12	≤ 3.5.37
CVE-2022-26510US	medium6.5	1.31% (70th)	—	no fix	2022-05-12	= 3.5.37
CVE-2026-38704US	—	1.27% (70th)	—	3.5.112	2026-05-28	< 3.5.112
CVE-2026-38707US	—	1.24% (69th)	—	3.5.112	2026-05-28	< 3.5.112
CVE-2026-38703US	—	1.24% (69th)	—	3.5.112	2026-05-28	< 3.5.112
CVE-2026-38702US	—	1.24% (69th)	—	3.5.112	2026-05-28	< 3.5.112
CVE-2022-27172US	high8.8OT elevated	1.08% (65th)	—	no fix	2022-05-12	≤ 3.5.37
CVE-2022-25172US	medium6.1	1.03% (64th)	—	no fix	2022-05-12	≤ 3.5.4
CVE-2022-28689US	high8.8OT elevated	0.97% (62nd)	—	no fix	2022-11-09	= 3.5.45
CVE-2022-30543US	high8.8OT elevated	0.93% (60th)	—	no fix	2022-11-09	= 3.5.45
CVE-2022-26023US	medium6.5OT elevated	0.83% (57th)	—	no fix	2022-11-09	= 3.5.45
CVE-2022-29481US	medium6.5OT elevated	0.82% (57th)	—	no fix	2022-11-09	= 3.5.45
CVE-2022-26020US	medium6.5OT elevated	0.68% (52nd)	—	no fix	2022-05-12	= 3.5.37

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')7 CVEs
CWE-489Active Debug Code6 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-1004Sensitive Cookie Without 'HttpOnly' Flag1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan