CVE-2022-48072

Name of the Vulnerable Software and Affected Versions Phicomm K2G version 22.6.3.20

Description The issue is related to a command injection vulnerability in the automatic upgrade function via the autoUpTime parameter.

Recommendations For Phicomm K2G version 22.6.3.20, consider restricting access to the automatic upgrade function until a patch is available. As a temporary workaround, avoid using the autoUpTime parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.