CVE-2022-26510

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter302 version 3.5.37

Description The issue is related to the incorrect verification of the cryptographic signature in the firmware update procedure of the InHand Networks InRouter302. This can be exploited by a remote attacker using a specially crafted HTTP request to update the firmware. An attacker can trigger this issue by sending a sequence of requests.

Recommendations For InHand Networks InRouter302 version 3.5.37, consider restricting access to the firmware update functionality until a patch is available. As a temporary workaround, avoid using the vulnerable firmware update mechanism. At the moment, there is no information about a newer version that contains a fix for this vulnerability.