CVE-2022-48072 - Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function

HIGH

Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function

Published Jan 27, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.90%

Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://befitting-vinca-933.notion.site/Phicomm-K2G-v22-6-3-20-Command-injection-Vulnerability-36d54f03e35045bba8ec02bb85379614		ExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-50786		Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 27, 2023

Updated Mar 28, 2025

Reserved Dec 29, 2022

Updated Mar 28, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 27, 2023

Updated Mar 28, 2025

Exploited since n/a