CVE-2017-11495

PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the…

published July 20, 2017

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

🚨 Unauthenticated remote code execution is up for grabs with PHICOMM K2 devices running version V22.5.11.5 and earlier! A mere request to the wrong ASP script can lead to serious trouble. 🔥 Think of it like a tech-savvy guest sneaking into your home, flipping the power switch without you knowing. They don’t need to pick a lock; they just waltz in through the open door! If exploited, an attacker could execute arbitrary code on your device, potentially leading to complete control over your network. This could mean unauthorized access to sensitive information or even a complete reboot, disrupting your connection like a sudden power outage!

Put simply

Think of it like a tech-savvy guest sneaking into your home, flipping the power switch without you knowing. They don’t need to pick a lock; they just waltz in through the open door! The vulnerability in PHICOMM K2 devices allows unauthenticated users to execute remote code via access to an unspecified ASP script, which could be leveraged to trigger a reboot or execute harmful commands.

What to do

If exploited, an attacker could execute arbitrary code on your device, potentially leading to complete control over your network. This could mean unauthorized access to sensitive information or even a complete reboot, disrupting your connection like a sudden power outage! Protect your devices by upgrading to the latest firmware version immediately, ensuring you’re on a version above V22.5.11.5. Additionally, check your device settings to minimize unauthorized access and tighten security protocols. This is fixable! With a quick upgrade, you can safeguard your devices and keep your network secure. You've got this! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03177 · 87.9th percentile
Published
2017-07-20T22:00Z
EPSS history
Timeline
  • 20 JUL 22:00Z
    PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the…
    cvelistv5