CVE-2022-25213

🗓️ 07 Mar 2022 21:55:25Reported by tenableType

Improper physical access control and hard-coded credentials permit attacker to obtain root shell via UART por

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-25213	10 Mar 202217:47	–	attackerkb
CNNVD	Phicomm 多款产品信任管理问题漏洞	9 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-25213	7 Mar 202221:55	–	cvelist
EUVD	EUVD-2022-29912	3 Oct 202520:07	–	euvd
NVD	CVE-2022-25213	10 Mar 202217:47	–	nvd
Prion	Hardcoded credentials	10 Mar 202217:47	–	prion
Positive Technologies	PT-2022-17152 · Phicomm · K2 Firmware +1	7 Mar 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-25213	22 May 202522:32	–	redhatcve

NVD

Node

phicomm k2_firmwareRange≤22.5.9.163

AND

phicomm k2Match-

Node

phicomm k3_firmwareRange≤21.5.37.246

AND

phicomm k3Match-

Node

phicomm k3c_firmwareRange≤32.1.15.93

AND

phicomm k3cMatch-

Node

phicomm k2g_firmwareRange≤22.6.3.20

AND

phicomm k2gMatch-

Node

phicomm k2p_firmwareRange≤20.4.1.7

AND

phicomm k2pMatch-

[
  {
    "product": "Phicomm Routers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "K3C"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2022-01

21 Nov 2024 06:51Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.8

CVSS 27.2

EPSS0.00054

CWE-798