CVE-2022-37778 — HIGH (7.2)

Vulnerability Description

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the current_time parameter of the time function.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Phicomm	Fir151B Firmware	3.0.1.17
Phicomm	Fir151B	a2
Phicomm	Fir302E Firmware	3.0.1.17
Phicomm	Fir302E	a2
Phicomm	Fir300B Firmware	3.0.1.17
Phicomm	Fir300B	a2
Phicomm	Fir303B Firmware	3.0.1.17
Phicomm	Fir303B	a2

References

https://github.com/SLoSnow9879/Phicomm_Router/blob/main/Time.mdExploitThird Party Advisory
https://github.com/SLoSnow9879/Phicomm_Router/blob/main/Time.mdExploitThird Party Advisory

FAQ

What is CVE-2022-37778?

CVE-2022-37778 is a vulnerability with a CVSS score of 7.2 (HIGH). Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the current_time parameter of the time function.

How severe is CVE-2022-37778?

CVE-2022-37778 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-37778?

Check the references section above for vendor advisories and patch information. Affected products include: Phicomm Fir151B Firmware, Phicomm Fir151B, Phicomm Fir302E Firmware, Phicomm Fir302E, Phicomm Fir300B Firmware.