← Database
CVE-2022-25213
MEDIUM
CVSS: 6.8
Published: 2022-03-10
Modified: 2026-06-17
Description
Improper physical access control and use of hard-coded credentials in /etc/passwd permits an attacker with physical access to obtain a root shell via an unprotected UART port on the device. The same port exposes an unauthenticated Das U-Boot BIOS shell.
Affected Platforms
Phicomm K3Phicomm K3CPhicomm K2GPhicomm K2P FirmwarePhicomm K2PPhicomm K2 FirmwarePhicomm K2G FirmwarePhicomm K3C FirmwarePhicomm K3 FirmwarePhicomm K2
Weakness Type
CWE-798, NVD-CWE-Other