CVE-2022-25218

The CVE-2022-25218 entry concerns PHICOMM router devices (e.g., K2, K3, K3C) where telnetd_startup uses RSA without OAEP or padding. An unauthenticated attacker on the LAN can craft UDP packets to influence the OpenSSL RSA_public_decrypt() processing, manipulating the telnetd startup state machin...

CVE-2022-25219

CVE-2022-25219/25218 describe a flaw in the telnetd_startup routine where the use of RSA without padding (or OAEP) enables an unauthenticated attacker on the local network to influence the decrypted plaintext via crafted UDP packets, potentially gaining a root shell. The 25219 issue centers on a ...

CVE-2022-25213

CVE-2022-25213 describes improper physical access control and hard-coded credentials in /etc/passwd that allow an attacker with physical access to obtain a root shell via an unprotected UART port, which also exposes an unauthenticated Das U-Boot BIOS shell. The description applies to devices with...

CVE-2022-25214

CVE-2022-25214 affects PHICOMM K2/K3 family routers where LocalClientList.asp and wirelesssetup.asp improperly enforce access control. An unauthenticated remote attacker can read LAN device details (IP/MAC) and WPA passphrases for 2.4/5.0 GHz networks, with particular risk if the setup wizard reu...

CVE-2022-25215

CVE-2022-25215 is an improper access-control vulnerability on the LocalMACConfig.asp interface that allows an unauthenticated remote attacker to add or remove client MAC addresses from a banned list, blocking those clients from WAN or router access. Connected sources indicate affected PHICOMM dev...