A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can upload a malicious file to trigger this vulnerability.
Weakness
Creating and using insecure temporary files can leave application and system data vulnerable to attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Inrouter302_firmware | Inhandnetworks | * | 3.5.37 (including) |