CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

CVE-2022-25214

CVE-2022-25214 affects PHICOMM K2/K3 family routers where LocalClientList.asp and wirelesssetup.asp improperly enforce access control. An unauthenticated remote attacker can read LAN device details (IP/MAC) and WPA passphrases for 2.4/5.0 GHz networks, with particular risk if the setup wizard reu...