Vulnerability Details CVE-2022-25215
Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresses to (or from) a list of banned hosts. Clients with those MAC addresses are then prevented from accessing either the WAN or the router itself.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.9%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
Products affected by CVE-2022-25215
-
cpe:2.3:h:phicomm:k2:-
-
cpe:2.3:h:phicomm:k2g:-
-
cpe:2.3:h:phicomm:k2p:-
-
cpe:2.3:h:phicomm:k3:-
-
cpe:2.3:h:phicomm:k3c:-
-
cpe:2.3:o:phicomm:k2_firmware:-
-
cpe:2.3:o:phicomm:k2_firmware:22.5.9.163
-
cpe:2.3:o:phicomm:k2g_firmware:-
-
cpe:2.3:o:phicomm:k2g_firmware:22.6.3.20
-
cpe:2.3:o:phicomm:k2p_firmware:-
-
cpe:2.3:o:phicomm:k2p_firmware:20.4.1.7
-
cpe:2.3:o:phicomm:k3_firmware:-
-
cpe:2.3:o:phicomm:k3_firmware:21.5.37.246
-
cpe:2.3:o:phicomm:k3c_firmware:-
-
cpe:2.3:o:phicomm:k3c_firmware:32.1.15.93