CVE-2022-26782 – Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import …

Vuln ID: CVE-2022-26782

Published:  2022-05-12  17:15:11Z

Description: Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input validation vulnerability exists in the `httpd`’s `user_define_set_item` function. Controlling the `user_define_timeout` nvram variable can lead to remote code execution.

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):