PT-2023-15558
CVE-2022-48070
·
Published
2023-01-27
·
Updated
2025-03-28
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Phicomm K2 version 22.6.534.263
Description
A command injection issue was discovered in the automatic upgrade function via the
autoUpTime parameter.Recommendations
For Phicomm K2 version 22.6.534.263, avoid using the
autoUpTime parameter in the automatic upgrade function until a fix is available. As a temporary workaround, consider restricting access to the automatic upgrade function to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾