ZeroHour

CVE-2017-11495

PoC
CVSS 3.0
9.8 critical
EPSS
3%p87
Published
()
Modified
Description

PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action.

Vendors
phicomm
Products
k2\(psg1218\)-firmware
Weakness
CWE-20
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.