Approved changes feed: RSS · Atom

cpe:2.3:h:phicomm:k2\(psg1218\):-:*:*:*:*:*:*:*

part: h version: - update: *

VendorPhicomm (b376c148-0750-518c-8979-daff6ed3784d)
ProductK2(Psg1218) (05fd91a2-f5b3-515e-b6ba-5a09639631c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19117 not_vulnerable 2026-06-03 14:40:03.907202 Details available
/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter.
Published: 2019-11-18T21:03:51.000Z
Updated: 2024-08-05T02:09:39.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11495 not_vulnerable 2026-06-03 14:36:28.717638 Details available
PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action.
Published: 2017-07-20T22:00:00.000Z
Updated: 2024-09-17T03:34:12.414Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.