Command injection

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the currenttime parameter of the time function...

Command injection

FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function...

CVE-2022-37779

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the sendnum parameter of the ping function...

CVE-2022-38531

CVE-2022-38531 affects FPT G-97RG6M (R4.2.98.035) and G-97RG3 (R4.2.43.078); vulnerability is remote command execution in the ping function. Connected sources confirm affected firmware and the issue but do not provide a published fix. PT Security notes no known patch and recommends disabling ping...

CVE-2022-38531

FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function...

CVE-2022-37778

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the currenttime parameter of the time function...

CVE-2022-37778

CVE-2022-37778 affects Phicomm FIR151B A2, FIR302E A2, FIR300B A2, and FIR303B A2 routers running V3.0.1.17. The issue is a remote command execution (RCE) via the current_time parameter of the time function. Public documents confirm the affected devices and the exact exploitation vector, but none...

CVE-2022-30078

NETGEAR R6200V2 firmware versions through R6200v2-V1.0.3.1210.1.11 and R6300V2 firmware versions through R6300v2-V1.0.4.5210.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or...

CVE-2022-37780

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the pingAddr parameter of the tracert function...

Command injection

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the pingAddr parameter of the tracert function...

CVE-2022-37780

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the pingAddr parameter of the tracert function...

CVE-2022-37780

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the pingAddr parameter of the tracert function...

CVE-2022-37777: Undefined Security Weakness

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote command execution RCE vulnerability via the trHops parameter of the tracert function...

CVE-2022-38531: Improper Neutralization of Special Elements used in an OS Command

FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function...

Multiple Phicomm products have security vulnerabilities

The Phicomm FIR151B A2, among others, is a wireless router from the Chinese company Fusion Phicomm. A security vulnerability exists in Phicomm, which stems from the trHops parameter of its tracert function that allows an attacker to achieve remote command execution. The following versions are...

Multiple Phicomm products have security vulnerabilities

The Phicomm FIR151B A2, among others, is a wireless router from the Chinese company Fusion Phicomm. A security vulnerability exists in Phicomm, which stems from the currenttime parameter of its time function allowing an attacker to achieve remote command execution. The following versions are...

CVE-2022-37780: Undefined Security Weakness

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the pingAddr parameter of the tracert function...

CVE-2022-37779: Undefined Security Weakness

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the sendnum parameter of the ping function...

CVE-2022-37778: Undefined Security Weakness

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the currenttime parameter of the time function...

PT-2022-24439 · Fpt · Fpt G-97Rg3 +1

Name of the Vulnerable Software and Affected Versions: FPT G-97RG6M version R4.2.98.035 FPT G-97RG3 version R4.2.43.078 Description: The issue allows for Remote Command Execution in the ping function. Recommendations: For FPT G-97RG6M version R4.2.98.035, consider disabling the ping function unti...