CVE-2022-26020CWE-321

An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4

Medium · published May 12, 2022

CVSS v3.0
6.3
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00681 · 51.9th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2022-05-12T17:01Z
EPSS history
Timeline
  • 12 MAY 17:01Z
    An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4
    cvelistv5