K3c Firmware vulnerabilities

2 known vulnerabilities in K3c Firmware from Phicomm. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Phicomm Routers: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2022-25218Mar 10, 2022Phicomm Routers

  The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext wi

• 7.8 High severity

  Phicomm Routers: Use of Hard-coded Credentials

  CVE-2022-25217Mar 10, 2022Phicomm Routers

  Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on the local area network to obtain a root shell on the device over telnet. The builds of telnetd_startup included in the version 22.5.9.163 of the K2 firmware, and ve