medium5.3
CVE-2022-25215
Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresses to (or from) a li…
Impact
Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresses to (or from) a list of banned hosts. Clients with those MAC addresses are then prevented from accessing either the WAN or the router itself.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phicomm | K2 Firmware | through 22.5.9.163 |
| Phicomm | K3 Firmware | through 21.5.37.246 |
| Phicomm | K3c Firmware | through 32.1.15.93 |
| Phicomm | K2g Firmware | through 22.6.3.20 |
| Phicomm | K2p Firmware | through 20.4.1.7 |