Lucene search
HistorySep 08, 2022 - 12:15 a.m.
CVE-2022-37777
phicomm
routers
vulnerability
rce
trhops parameter
tracert function
cve-2022-37777
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
71.3%
Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote command execution (RCE) vulnerability via the trHops parameter of the tracert function.
Affected configurations
Node
phicommfir151b_firmwareRange≤3.0.1.17
phicommfir151bMatcha2
Node
phicommfir302e_firmwareRange≤3.0.1.17
phicommfir302eMatcha2
Node
phicommfir300b_firmwareRange≤3.0.1.17
phicommfir300bMatcha2
Node
phicommfir303b_firmwareRange≤3.0.1.17
phicommfir303bMatcha2
| CPE | Name | Operator | Version |
|---|---|---|---|
| phicomm:fir151b_firmware | phicomm fir151b firmware | le | 3.0.1.17 |
Related
prion
prion
Command injection
2022-09-08 00:15:00
cvelist
cvelist
CVE-2022-37777
2022-09-07 23:14:09
nvd
nvd
CVE-2022-37777
2022-09-08 00:15:10
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
71.3%
Related for CVE-2022-37777