PHICOMM K2(PSG1218) devices V22.5.11.5 and previous versions allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
phicomm k2\\(psg1218\\)-firmware |