cve/2022/CVE-2022-26023.md

18 lines
825 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2022-26023](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26023)
![](https://img.shields.io/static/v1?label=Product&message=InRouter302&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20V3.5.45%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-489%3A%20Leftover%20Debug%20Code&color=brighgreen)
### Description
A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to disabling security features. An attacker can send a sequence of requests to trigger this vulnerability.
### POC
#### Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1520
#### Github
No PoCs found on GitHub currently.