CVE-2022-27172
Assigner: talos
Published: 2022-05-10T00:00:00
State: PUBLISHED
affected: product: InRouter302
vendor: InHand Networks
versions: status: affected
version: V3.5.37
datePublic: 2022-05-10T00:00:00
descriptions: value: A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-259
description: CWE-259: Use of Hard-coded Password
type: CWE