CVE-2022-37780

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the pingAddr parameter of the tracert function.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2022-09-07

Last modified

2025-06-17

Affected products

• Fir151b Firmware (Phicomm)
• Fir300b Firmware (Phicomm)
• Fir302e Firmware (Phicomm)
• Fir303b Firmware (Phicomm)

References

• https://github.com/SLoSnow9879/Phicomm_Router/blob/main/Tracert_1.md