« Volver al listado

CVE-2022-37779

Estado: ModificadaAlta (7.2)—

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the sendnum parameter of the ping function.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Phicomm — Fir151b FirmwarePhicomm — Fir300b FirmwarePhicomm — Fir302e FirmwarePhicomm — Fir303b Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-37779",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-09-08T00:15:10.233",
  "references": [
    {
      "url": "https://github.com/SLoSnow9879/Feixun_Router/blob/main/Ping_1.md",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/SLoSnow9879/Feixun_Router/blob/main/Ping_1.md",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the sendnum parameter of the ping function."
    },
    {
      "lang": "es",
      "value": "Se ha detectado que los enrutadores Phicomm versiones FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 V3.0.1.17, contenían una vulnerabilidad de ejecución de comando remoto (RCE) por medio del parámetro sendnum de la función ping"
    }
  ],
  "lastModified": "2026-06-17T04:55:14.277",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phicomm:fir151b_firmware:3.0.1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9930251F-3129-4693-8EBE-C8B7ED6851F2"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phicomm:fir151b:a2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C19A2F00-33C6-43B1-85CA-96371C89016F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phicomm:fir302e_firmware:3.0.1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5E667E6-1AD9-422D-A42F-12207516B787"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phicomm:fir302e:a2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "426912D9-0FE3-4698-99CE-F38197D50C10"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phicomm:fir300b_firmware:3.0.1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D7FF0A8-0BD1-44C3-8CC2-6C3FA1512712"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phicomm:fir300b:a2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "00FE9576-A53C-4CDB-A13B-754AEA9705E3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:phicomm:fir303b_firmware:3.0.1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7042ED4-66F0-45EB-85E4-F285E50EC8EA"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:phicomm:fir303b:a2:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C01C9916-B30E-4DCA-B4C1-311C983AA8DD"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}