← All advisories

High severity7.8NVD Advisory· Published Jan 27, 2023· Updated Jun 17, 2026

CVE-2022-48072

CVE-2022-48072

Description

Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function.

Affected products

3

Phicomm/K2 Firmware
cpe:2.3:o:phicomm:k2_firmware:22.6.3.20:*:*:*:*:*:*:*
Phicomm/K2Gcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: v22.6.3.20

Patches

Vulnerability mechanics

References

1

befitting-vinca-933.notion.site/Phicomm-K2G-v22-6-3-20-Command-injection-Vulnerability-36d54f03e35045bba8ec02bb85379614nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.