CVSS 8.1 · High EPSS 0,99%
Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada phicomm k2 firmware, phicomm k3 firmware +3 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.
The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the "plaintext" to which an arbitrary blob of ciphertext will be decrypted by OpenSSL's RSA_public_decrypt() function. This weakness allows the attacker to manipulate the various iterations of the telnetd startup state machine and eventually obtain a root shell on the device, by means of an exchange of crafted UDP packets. In all versions but K2 22.5.9.163 and K3C 32.1.15.93 a successful attack also requires the exploitation of a null-byte interaction error (CVE-2022-25219).
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| phicomm | k2 firmware | Semua versi hingga 22.5.9.163 |
| phicomm | k3 firmware | Semua versi hingga 21.5.37.246 |
| phicomm | k3c firmware | Semua versi hingga 32.1.15.93 |
| phicomm | k2g firmware | Semua versi hingga 22.6.3.20 |
| phicomm | k2p firmware | Semua versi hingga 20.4.1.7 |