CVE-2022-21182CWE-284

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4

High · published May 12, 2022

CVSS v3.0
7.4
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01971 · 80.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-05-12T17:01Z
EPSS history
Timeline
  • 12 MAY 17:01Z
    A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4
    cvelistv5