Phicomm vulnerabilities
We track 3 vulnerabilities in Phicomm products across 6 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 19, 2022.
Latest Phicomm vulnerabilities
- 8.8 High severity
Fir303b Firmware: Improper Neutralization of Special Elements used in an OS Command
Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command execution (RCE) vulnerability via the Ping function.
- 8.1 High severity
Phicomm Routers: Use of a Broken or Risky Cryptographic Algorithm
The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext wi
- 7.8 High severity
Phicomm Routers: Use of Hard-coded Credentials
Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on the local area network to obtain a root shell on the device over telnet. The builds of telnetd_startup included in the version 22.5.9.163 of the K2 firmware, and ve