CVE-2023-40796

Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call...

Command injection

Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call...

CVE-2023-40796

Phicomm K2 devices, specifically v22.6.529.216, are affected by a command injection vulnerability in the luci.sys.call function. Root cause: insecure handling in luci.sys.call enables local exploitation with user interaction, potentially leading to remote command execution with high impact. Explo...