High severity8.8NVD Advisory· Published Nov 18, 2019· Updated Jun 17, 2026
CVE-2019-19117
CVE-2019-19117
Description
/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:phicomm:k2\(psg1218\)_firmware:22.5.9.163:*:*:*:*:*:*:*
- PHICOMM/K2description
Patches
Vulnerability mechanics
References
1- github.com/decentL/IoT/blob/master/Phicomm/remote-code-execution.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.