Skip to content
Noroxi

phicomm records

18 published records for vendor phicomm.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 22
  4. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2017-11495
    40Plan

    PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; a

    CriticalCVSS 9.8No exploitEPSS 3%

    phicomm · k2\(psg1218\)-firmwareJul 20, 2017

  • CVE-2019-19117
    37Monitor

    /usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute a

    HighCVSS 8.8No exploitEPSS 5%

    phicomm · k2\(psg1218\) firmwareNov 18, 2019

  • CVE-2022-27373
    36Monitor

    Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command execution (RCE) vulnerab

    HighCVSS 8.8No exploitEPSS 3%

    phicomm · fir303b firmwareJul 19, 2022

  • CVE-2022-25219
    33Monitor

    A null byte interaction error has been discovered in the code that the telnetd_startup daemon uses to construct a pair of ephemeral password

    HighCVSS 8.4No exploitEPSS 0%

    phicomm · k2 firmwareMar 10, 2022

  • CVE-2022-25218
    32Monitor

    The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local

    HighCVSS 8.1No exploitEPSS 0%

    phicomm · k2 firmwareMar 10, 2022

  • CVE-2023-40796
    31Monitor

    Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call.

    HighCVSS 7.8No exploitEPSS 0%

    phicomm · k2 firmwareAug 25, 2023

  • CVE-2022-48070
    31Monitor

    Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade f

    HighCVSS 7.8No exploitEPSS 0%

    phicomm · k2 firmwareJan 27, 2023

  • CVE-2022-48072
    31Monitor

    Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade fun

    HighCVSS 7.8No exploitEPSS 0%

    phicomm · k2 firmwareJan 27, 2023

  • CVE-2022-25217
    31Monitor

    Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on the local area network to obtain a root shel

    HighCVSS 7.8No exploitEPSS 0%

    phicomm · k2 firmwareMar 10, 2022

  • CVE-2022-48073
    30Monitor

    Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext.

    HighCVSS 7.5No exploitEPSS 0%

    phicomm · k2 firmwareJan 27, 2023

  • CVE-2022-48071
    30Monitor

    Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext.

    HighCVSS 7.5No exploitEPSS 0%

    phicomm · k2 firmwareJan 27, 2023

  • CVE-2022-37780
    29Monitor

    Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnera

    HighCVSS 7.2No exploitEPSS 2%

    phicomm · fir151b firmwareSep 7, 2022

  • CVE-2022-37777
    29Monitor

    Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote command execution (R

    HighCVSS 7.2No exploitEPSS 2%

    phicomm · fir151b firmwareSep 7, 2022

  • CVE-2022-37778
    29Monitor

    Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnera

    HighCVSS 7.2No exploitEPSS 2%

    phicomm · fir151b firmwareSep 7, 2022

  • CVE-2022-37779
    29Monitor

    Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnera

    HighCVSS 7.2No exploitEPSS 2%

    phicomm · fir151b firmwareSep 7, 2022

  • CVE-2022-25214
    29Monitor

    Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information conce

    HighCVSS 7.4No exploitEPSS 1%

    phicomm · k2 firmwareMar 10, 2022

  • CVE-2022-25213
    27Monitor

    Improper physical access control and use of hard-coded credentials in /etc/passwd permits an attacker with physical access to obtain a root

    MediumCVSS 6.8No exploitEPSS 0%

    phicomm · k2 firmwareMar 10, 2022

  • CVE-2022-25215
    21Monitor

    Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresse

    MediumCVSS 5.3No exploitEPSS 1%

    phicomm · k2 firmwareMar 10, 2022