Vulnerabilities > Inhandnetworks > Inrouter302 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-01-12 CVE-2023-22597 Unspecified vulnerability in Inhandnetworks Inrouter302 Firmware and Inrouter615-S Firmware
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information.
network
high complexity
inhandnetworks
5.9
2022-05-12 CVE-2022-21238 Cross-site Scripting vulnerability in Inhandnetworks Inrouter302 Firmware 3.5.37/3.5.4
A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4.
network
low complexity
inhandnetworks CWE-79
6.1