Lucene search
HistorySep 07, 2022 - 5:15 p.m.
CVE-2022-37780
phicomm
routers
vulnerability
rce
pingaddr
tracert
cve-2022-37780
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
71.3%
Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the pingAddr parameter of the tracert function.
Affected configurations
Node
phicommfir151b_firmwareMatch3.0.1.17
phicommfir151bMatcha2
Node
phicommfir302e_firmwareMatch3.0.1.17
phicommfir302eMatcha2
Node
phicommfir300b_firmwareMatch3.0.1.17
phicommfir300bMatcha2
Node
phicommfir303b_firmwareMatch3.0.1.17
phicommfir303bMatcha2
| CPE | Name | Operator | Version |
|---|---|---|---|
| phicomm:fir151b_firmware | phicomm fir151b firmware | eq | 3.0.1.17 |
Social References
More
Related
prion
prion
Command injection
2022-09-07 17:15:00
nvd
nvd
CVE-2022-37780
2022-09-07 17:15:08
cvelist
cvelist
CVE-2022-37780
2022-09-07 16:27:06
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
71.3%
Related for CVE-2022-37780