ID
VAR-202203-0220
CVE
CVE-2022-25218
TITLE
plural PHICOMM Product vulnerabilities
Trust: 0.8
DESCRIPTION
The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext will be decrypted by OpenSSL's RSA_public_decrypt() function. This weakness allows the attacker to manipulate the various iterations of the telnetd startup state machine and eventually obtain a root shell on the device, by means of an exchange of crafted UDP packets. In all versions but K2 22.5.9.163 and K3C 32.1.15.93 a successful attack also requires the exploitation of a null-byte interaction error (CVE-2022-25219). k2 firmware, k3 firmware, k3c firmware etc. PHICOMM There are unspecified vulnerabilities in the product.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
Trust: 1.62
AFFECTED PRODUCTS
| vendor: | phicomm | model: | k3c | scope: | lte | version: | 32.1.15.93 | Trust: 1.0 |
| vendor: | phicomm | model: | k2p | scope: | lte | version: | 20.4.1.7 | Trust: 1.0 |
| vendor: | phicomm | model: | k3 | scope: | lte | version: | 21.5.37.246 | Trust: 1.0 |
| vendor: | phicomm | model: | k2g | scope: | lte | version: | 22.6.3.20 | Trust: 1.0 |
| vendor: | phicomm | model: | k2 | scope: | lte | version: | 22.5.9.163 | Trust: 1.0 |
| vendor: | phicomm | model: | k3 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | phicomm | model: | k2 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | phicomm | model: | k3c | scope: | - | version: | - | Trust: 0.8 |
| vendor: | phicomm | model: | k2p | scope: | - | version: | - | Trust: 0.8 |
| vendor: | phicomm | model: | k2g | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-327 | Trust: 1.0 |
| problemtype: | Lack of information (CWE-noinfo) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
access control error
Trust: 0.6
PATCH
| title: | Phicomm Repair measures for multiple product access control errors and vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=185415 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2022-25218 | Trust: 3.2 |
| db: | TENABLE | id: | TRA-2022-01 | Trust: 2.4 |
| db: | JVNDB | id: | JVNDB-2022-006583 | Trust: 0.8 |
| db: | CS-HELP | id: | SB2022030909 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202203-803 | Trust: 0.6 |
REFERENCES
| url: | https://www.tenable.com/security/research/tra-2022-01 | Trust: 2.4 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2022-25218 | Trust: 0.8 |
| url: | https://cxsecurity.com/cveshow/cve-2022-25218/ | Trust: 0.6 |
| url: | https://www.cybersecurity-help.cz/vdb/sb2022030909 | Trust: 0.6 |
SOURCES
| db: | JVNDB | id: | JVNDB-2022-006583 |
| db: | CNNVD | id: | CNNVD-202203-803 |
| db: | NVD | id: | CVE-2022-25218 |
LAST UPDATE DATE
2024-11-23T21:50:40.581000+00:00
SOURCES UPDATE DATE
| db: | JVNDB | id: | JVNDB-2022-006583 | date: | 2023-07-06T08:11:00 |
| db: | CNNVD | id: | CNNVD-202203-803 | date: | 2022-03-18T00:00:00 |
| db: | NVD | id: | CVE-2022-25218 | date: | 2024-11-21T06:51:49.603 |
SOURCES RELEASE DATE
| db: | JVNDB | id: | JVNDB-2022-006583 | date: | 2023-07-06T00:00:00 |
| db: | CNNVD | id: | CNNVD-202203-803 | date: | 2022-03-09T00:00:00 |
| db: | NVD | id: | CVE-2022-25218 | date: | 2022-03-10T17:47:02.133 |