CVE-2022-25215

🗓️ 07 Mar 2022 21:53:11Reported by tenableType

Improper access control on the LocalMACConfig.asp interface allows unauthenticated remote attacker to add/remove client MAC addresses to/from a banned list, preventing access to WAN or router.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-25215	10 Mar 202217:47	–	attackerkb
CNNVD	Phicomm多款产品安全漏洞	9 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-25215	7 Mar 202221:53	–	cvelist
EUVD	EUVD-2022-29914	3 Oct 202520:07	–	euvd
NVD	CVE-2022-25215	10 Mar 202217:47	–	nvd
Prion	Improper access control	10 Mar 202217:47	–	prion
Positive Technologies	PT-2022-17154 · Phicomm · K2 Firmware +1	7 Mar 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-25215	23 May 202500:04	–	redhatcve

NVD

Node

phicomm k2_firmwareRange≤22.5.9.163

AND

phicomm k2Match-

Node

phicomm k3_firmwareRange≤21.5.37.246

AND

phicomm k3Match-

Node

phicomm k3c_firmwareRange≤32.1.15.93

AND

phicomm k3cMatch-

Node

phicomm k2g_firmwareRange≤22.6.3.20

AND

phicomm k2gMatch-

Node

phicomm k2p_firmwareRange≤20.4.1.7

AND

phicomm k2pMatch-

[
  {
    "product": "Phicomm Routers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "K2G A1 >= 22.6.3.20, K2 A7 >= 22.6.506.28, K2G A1 >= 22.6.3.20"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2022-01

21 Nov 2024 06:51Current

5.4Medium risk

Vulners AI Score5.4

CVSS 25

CVSS 3.15.3

EPSS0.00386