CVE-2022-25932: Inhandnetworks INROUTER302 Firmware

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474. The fixes are incomplete. An attacker can still perform, respectively, a privilege escalation and an information disclosure vulnerability.

Affected products

• Inhandnetworks INROUTER302 Firmware: before 3.5.56 (fixed in 3.5.56)

Published 2022-11-09. Last modified 2026-06-17.