CVE-2022-21182: Inhandnetworks INROUTER302 Firmware

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

• Inhandnetworks INROUTER302 Firmware: up to and including 3.5.4

Published 2022-05-12. Last modified 2026-06-17.