A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
The product is released with debugging code still enabled or active.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ir302_firmware | Inhandnetworks | 3.5.4 (including) | 3.5.4 (including) |