124 matches found
Code injection
Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext...
Command injection
Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function...
CVE-2022-48070
Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function...
CVE-2022-48073
CVE-2022-48073 affects Phicomm K2G v22.6.3.20, where root and admin passwords are stored in plaintext. The vulnerability description and linked references confirm exposure of credentials, leading to confidentiality impact (C:H) with high severity (CVSS v3.1 7.5). The incident stems from plaintext...
CVE-2022-48070
Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function...
CVE-2022-48072
Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function...
CVE-2022-48071
Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext...
PHICOMM K2G A1 操作系统命令注入漏洞
The PHICOMM K2G A1 is a dual-band Gigabit wireless WiFi router from PHICOMM, China. A security vulnerability exists in the PHICOMM K2G A1 version v22.6.534.263, which stems from the operation of the autoUpTime parameter of its automatic upgrade feature that allows an attacker to implement command...
CVE-2022-48071
Summary: CVE-2022-48071 affects Phicomm K2 firmware (v22.6.534.263) where root and admin passwords are stored in plaintext, enabling potential credential disclosure. Impact: Based on the linked metrics, CVSS v3.1 base score is 7.5 (HIGH) with network attack vector and no user interaction. Details...
CVE-2022-48070
Phicomm K2 devices (v22.6.534.263) are affected by CVE-2022-48070, a command‑injection vulnerability in the automatic upgrade function exposed via the autoUpTime parameter. The issue is rooted in the upgrade mechanism allowing arbitrary command execution with local attacker access and low privile...
PHICOMM K2G A1 安全漏洞
The PHICOMM K2G A1 is a dual-band Gigabit wireless WiFi router from PHICOMM China. A security vulnerability exists in the PHICOMM K2G A1 version v22.6.534.263, which originates from an attacker being able to discover the passwords of the root and admin users stored in the plaintext...
PT-2023-15558
Name of the Vulnerable Software and Affected Versions Phicomm K2 version 22.6.534.263 Description A command injection issue was discovered in the automatic upgrade function via the autoUpTime parameter. Recommendations For Phicomm K2 version 22.6.534.263, avoid using the autoUpTime parameter in t...
PT-2023-15559
Name of the Vulnerable Software and Affected Versions Phicomm K2 version 22.6.534.263 Description The issue concerns the storage of sensitive information. Specifically, the root and admin passwords are stored in plaintext. Recommendations For Phicomm K2 version 22.6.534.263, consider changing the...
CVE-2022-48073
Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext...
PT-2023-15560
Name of the Vulnerable Software and Affected Versions Phicomm K2G version 22.6.3.20 Description The issue is related to a command injection vulnerability in the automatic upgrade function via the autoUpTime parameter. Recommendations For Phicomm K2G version 22.6.3.20, consider restricting access ...
PHICOMM K2G A1 安全漏洞
The PHICOMM K2G A1 is a dual-band Gigabit wireless WiFi router from PHICOMM China. A security vulnerability exists in Phicomm K2 version v22.6.534.263, which stems from the fact that an attacker can discover the passwords of the root and admin users stored in the plaintext...
PT-2023-15561
Name of the Vulnerable Software and Affected Versions Phicomm K2G version 22.6.3.20 Phicomm K2 version 22.6.534.263 Description The issue concerns the storage of sensitive information. Specifically, the root and admin passwords are stored in plaintext. This poses a significant security risk as it...
CVE-2022-48071
Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext...
PHICOMM K2G A1 操作系统命令注入漏洞
The PHICOMM K2G A1 is a dual-band Gigabit wireless WiFi router from PHICOMM, China. A security vulnerability exists in the PHICOMM K2G A1 version v22.6.3.20, which stems from the operation of the autoUpTime parameter of its automatic upgrade feature that allows an attacker to implement command...