CVE-2022-24910

medium

Description

A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

References

https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1471

Details

Source: Mitre, NVD

Published: 2022-05-12

Updated: 2022-05-23

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.7

Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H