Phicomm vulnerabilities

Products

• K2 Firmware 11
• K3c Firmware 6
• Fir303b Firmware 5
• K2g Firmware 5
• K2p Firmware 5
• K3 Firmware 5
• Fir151b Firmware 4
• Fir300b Firmware 4
• Fir302e Firmware 4

Newest

• phicomm k2 firmware Phicomm k2 v22.6.529.216 is vulnerable to command injection. CVE-2023-40796 7.8 HighAugust 25, 2023
• phicomm k2 firmware Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. CVE-2022-48073 7.5 HighJanuary 27, 2023
• phicomm k2 firmware Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the... CVE-2022-48072 7.8 HighJanuary 27, 2023
• phicomm k2 firmware Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. CVE-2022-48071 7.5 HighJanuary 27, 2023
• phicomm k2 firmware Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the... CVE-2022-48070 7.8 HighJanuary 27, 2023
• phicomm fir151b firmware, fir300b firmware, fir302e firmware +1 more +3 more Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to... CVE-2022-37779 7.2 HighSeptember 7, 2022
• phicomm fir151b firmware, fir300b firmware, fir302e firmware +1 more +3 more Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were... CVE-2022-37777 7.2 HighSeptember 7, 2022
• phicomm fir151b firmware, fir300b firmware, fir302e firmware +1 more +3 more Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to... CVE-2022-37778 7.2 HighSeptember 7, 2022
• phicomm fir151b firmware, fir300b firmware, fir302e firmware +1 more +3 more Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to... CVE-2022-37780 7.2 HighSeptember 7, 2022
• phicomm fir303b firmware Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to... CVE-2022-27373 8.8 HighJuly 19, 2022
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more A null byte interaction error has been discovered in the code that the telnetd_startup daemon... CVE-2022-25219 8.4 HighMarch 7, 2022
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more Improper physical access control and use of hard-coded credentials in /etc/passwd permits an... CVE-2022-25213 6.8 MediumMarch 7, 2022
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote... CVE-2022-25215 5.3 MediumMarch 7, 2022
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup,... CVE-2022-25218 8.1 HighMarch 7, 2022
• phicomm k2 firmware, k3c firmware +1 more Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on... CVE-2022-25217 7.8 HighMarch 7, 2022
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more Improper access control on the LocalClientList.asp interface allows an unauthenticated remote... CVE-2022-25214 7.4 HighMarch 7, 2022
• phicomm k2\(psg1218\) firmware /usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices... CVE-2019-19117 8.8 HighNovember 18, 2019
• phicomm k2\(psg1218\)-firmware PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution... CVE-2017-11495 9.8 CriticalJuly 20, 2017