High severity7.2NVD Advisory· Published Sep 8, 2022· Updated Jun 17, 2026

CVE-2022-37777

Description

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote command execution (RCE) vulnerability via the trHops parameter of the tracert function.

Affected products

Phicomm/Fir151b Firmware
cpe:2.3:o:phicomm:fir151b_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.1.17
Phicomm/Fir300b Firmware
cpe:2.3:o:phicomm:fir300b_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.1.17
Phicomm/Fir302e Firmware
cpe:2.3:o:phicomm:fir302e_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.1.17
Phicomm/Fir303b Firmware
cpe:2.3:o:phicomm:fir303b_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.1.17
Phicomm/FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routersdescription
Phicomm/FIR151B A2llm-fuzzy
Range: <=3.0.1.17
Phicomm/FIR302E A2llm-fuzzy
Range: <=3.0.1.17
Phicomm/FIR300Bllm-fuzzy
Range: <=3.0.1.17

Patches

Vulnerability mechanics

References

github.com/SLoSnow9879/Phicomm_Router/blob/main/Tracert_2.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000