← Database

CVE-2022-25215

MEDIUM CVSS: 5.3 Published: 2022-03-10 Modified: 2026-06-17

Description

Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresses to (or from) a list of banned hosts. Clients with those MAC addresses are then prevented from accessing either the WAN or the router itself.

Affected Platforms

Phicomm K3Phicomm K3CPhicomm K2GPhicomm K2P FirmwarePhicomm K2PPhicomm K2 FirmwarePhicomm K2G FirmwarePhicomm K3C FirmwarePhicomm K3 FirmwarePhicomm K2

Weakness Type

NVD-CWE-Other

References