Phicomm K2 Firmware vulnerabilities

• phicomm k2 firmware Phicomm k2 v22.6.529.216 is vulnerable to command injection. CVE-2023-40796 7.8 HighAugust 25, 2023
• phicomm k2 firmware Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. CVE-2022-48073 7.5 HighJanuary 27, 2023
• phicomm k2 firmware Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the... CVE-2022-48072 7.8 HighJanuary 27, 2023
• phicomm k2 firmware Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. CVE-2022-48071 7.5 HighJanuary 27, 2023
• phicomm k2 firmware Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the... CVE-2022-48070 7.8 HighJanuary 27, 2023
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more A null byte interaction error has been discovered in the code that the telnetd_startup daemon... CVE-2022-25219 8.4 HighMarch 7, 2022
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more Improper physical access control and use of hard-coded credentials in /etc/passwd permits an... CVE-2022-25213 6.8 MediumMarch 7, 2022
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote... CVE-2022-25215 5.3 MediumMarch 7, 2022
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup,... CVE-2022-25218 8.1 HighMarch 7, 2022
• phicomm k2 firmware, k3c firmware +1 more Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on... CVE-2022-25217 7.8 HighMarch 7, 2022
• phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 more Improper access control on the LocalClientList.asp interface allows an unauthenticated remote... CVE-2022-25214 7.4 HighMarch 7, 2022