CVE-2022-25214

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated remote attacker to obtain the WPA passphrases for the 2.4GHz and 5.0GHz wireless networks. This is particularly dangerous given that the K2G setup wizard presents the user with the option of using the same password for the 2.4Ghz network and the administrative interface, by clicking a checkbox. When Remote Managment is enabled, these endpoints are exposed to the WAN.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	Phicomm Routers	K2G A1 >= 22.6.3.20, K2 A7 >= 22.6.506.28, K2G A1 >= 22.6.3.20

References

https://www.tenable.com/security/research/tra-2022-01Exploit, Third Party Advisory
https://www.tenable.com/security/research/tra-2022-01Exploit, Third Party Advisory

Timeline

Published: Mar 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-252155.3Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresse CVE-2022-252167.5An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account CVE-2022-252177.8Use of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on the local area network to obtain a root shel CVE-2022-252188.1The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local CVE-2022-252198.4A null byte interaction error has been discovered in the code that the telnetd_startup daemon uses to construct a pair of ephemeral password CVE-2022-25227.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.CVE-2022-252204.8PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creati CVE-2022-252216.1Money Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the URL and then trick a user into visit the li CVE-2022-252229.8Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/manage_branch.php' a CVE-2022-252234.3Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/view_detail CVE-2022-252245.4Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the application opens t CVE-2022-252257.2Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON p