← Zurück zur CVE-Suche

CVE-2026-38704

InHand Networks IR302

Beschreibung

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target devices.

CVSS 9.8EPSS 1.269%Risiko 1.09
Quelle öffnen
Veröffentlicht
2026-05-28 17:16:21
Betroffene Versionen
<V3.5.109
Typ
Firmware
Vektor
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H