CVE-2022-48073 | Severity.io

Description

Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext.

Related CPE's

Vulnerable

References

https://befitting-vinca-933.notion.site/Phicomm-K2-v22-6-534-263-Sensitive-Information-Disclosure-Vulnerability-530d2415593a400099451d9f0dd7371a

https://befitting-vinca-933.notion.site/Phicomm-K2G-v22-6-3-20-Sensitive-Information-Disclosure-Vulnerability-8649a75a7ea7455583294e7447145cc6

ExploitThird Party Advisory

https://befitting-vinca-933.notion.site/Phicomm-K2-v22-6-534-263-Sensitive-Information-Disclosure-Vulnerability-530d2415593a400099451d9f0dd7371a

https://befitting-vinca-933.notion.site/Phicomm-K2G-v22-6-3-20-Sensitive-Information-Disclosure-Vulnerability-8649a75a7ea7455583294e7447145cc6

ExploitThird Party Advisory

Weaknesses

[email protected]

Primary

CWE-312

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary

CWE-312

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-01-27T14:15:10.673Z

3 years ago

Last modified

2025-03-28T15:15:24.000Z

11 months ago