CVE-2022-25218

🗓️ 07 Mar 2022 21:50:25Reported by tenableType

The use of RSA algorithm without OAEP or any padding scheme in telnetd_startup allows unauthenticated attacker on local area network to control plaintext decrypted by OpenSSL's RSA_public_decrypt() function

Reporter	Title	Published	Views	Family All 14
attackerkb	CVE-2022-25218	10 Mar 202217:47	–	attackerkb
attackerkb	CVE-2022-25219	10 Mar 202217:47	–	attackerkb
Circl	CVE-2022-25218	10 Mar 202220:13	–	circl
CNNVD	多款PHICOMM产品加密问题漏洞	9 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-25218	7 Mar 202221:50	–	cvelist
EUVD	EUVD-2022-29917	3 Oct 202520:07	–	euvd
NVD	CVE-2022-25218	10 Mar 202217:47	–	nvd
OSV	CVE-2022-25218	10 Mar 202217:47	–	osv
Prion	Design/Logic Flaw	10 Mar 202217:47	–	prion
Prion	Design/Logic Flaw	10 Mar 202217:47	–	prion

NVD

Vulners

Node

AND

phicomm k2_firmwareRange≤22.5.9.163

phicomm k2Match-

Node

AND

phicomm k3_firmwareRange≤21.5.37.246

phicomm k3Match-

Node

AND

phicomm k3c_firmwareRange≤32.1.15.93

phicomm k3cMatch-

Node

AND

phicomm k2g_firmwareRange≤22.6.3.20

phicomm k2gMatch-

Node

AND

phicomm k2p_firmwareRange≤20.4.1.7

phicomm k2pMatch-

[
  {
    "product": "Phicomm Routers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "K2 >= 22.5.9.163, K3 >= 21.5.37.246, K3C >= 32.1.15.93, K2P >= 20.4.1.7, K2 A7 >= 22.6.506.28"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2022-01

17 Jun 2026 04:33Current

8High risk

Vulners AI Score8

CVSS 3.18.1

CVSS 29.3

EPSS0.00993

CWE-327