Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2017-11495

PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Phicomm
Products
K2\(psg1218\) K2\(psg1218\)-firmware
CVE-2019-19117

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter.

CVSS 3.1 · 8.8 High EPSS 5.0% KEV · Not listed
Vendors
Phicomm
Products
K2\(psg1218\) K2\(psg1218\) Firmware