CyberSecBulletin

Phicomm Routers vulnerabilities

We track 2 vulnerabilities in Phicomm Routers products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 10, 2022.

2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score

Latest Phicomm Routers vulnerabilities

  • 8.1 High severity

    Phicomm Routers: Use of a Broken or Risky Cryptographic Algorithm

    CVE-2022-25218Phicomm Routers

    The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext wi

  • 7.8 High severity

    Phicomm Routers: Use of Hard-coded Credentials

    CVE-2022-25217Phicomm Routers

    Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on the local area network to obtain a root shell on the device over telnet. The builds of telnetd_startup included in the version 22.5.9.163 of the K2 firmware, and ve