« Volver al listado

CVE-2022-37778

Estado: ModificadaAlta (7.2)—

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the current_time parameter of the time function.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Phicomm — Fir151b FirmwarePhicomm — Fir300b FirmwarePhicomm — Fir302e FirmwarePhicomm — Fir303b Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-37778",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-09-08T00:15:10.190",
  "references": [
    {
      "url": "https://github.com/SLoSnow9879/Phicomm_Router/blob/main/Time.md",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/SLoSnow9879/Phicomm_Router/blob/main/Time.md",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the current_time parameter of the time function."
    },
    {
      "lang": "es",
      "value": "Se ha detectado que los enrutadores Phicomm versiones FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 V3.0.1.17 contenían una vulnerabilidad de ejecución de comandos remota  (RCE) por medio del parámetro current_time de la función de time"
    }
  ],
  "lastModified": "2026-06-17T04:55:14.157",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phicomm:fir151b_firmware:3.0.1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9930251F-3129-4693-8EBE-C8B7ED6851F2"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phicomm:fir151b:a2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C19A2F00-33C6-43B1-85CA-96371C89016F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phicomm:fir302e_firmware:3.0.1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5E667E6-1AD9-422D-A42F-12207516B787"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phicomm:fir302e:a2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "426912D9-0FE3-4698-99CE-F38197D50C10"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phicomm:fir300b_firmware:3.0.1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D7FF0A8-0BD1-44C3-8CC2-6C3FA1512712"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phicomm:fir300b:a2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "00FE9576-A53C-4CDB-A13B-754AEA9705E3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phicomm:fir303b_firmware:3.0.1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7042ED4-66F0-45EB-85E4-F285E50EC8EA"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phicomm:fir303b:a2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C01C9916-B30E-4DCA-B4C1-311C983AA8DD"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}