Vulnerability · Published Sep 7, 2022 · Assigned by mitre
CVE-2022-37778
High 7.2
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities).
Severity (CVSS NVD)7.2High
Exploit odds (30 days)2.3%top 16.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the current_time parameter of the time function.
Affected products (as reported)
References
- https://github.com/SLoSnow9879/Phicomm_Router/blob/main/Time.md x_refsource_MISC