CVE-2022-24910: Inhandnetworks IR302 Firmware

Medium severity, CVSS 6.7. EPSS: 1.3% chance of exploitation in the next 30 days.

A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

Affected products

• Inhandnetworks IR302 Firmware: up to and including 3.5.37

Published 2022-05-12. Last modified 2026-06-17.