CVE-2017-11495

Critical

Published: 20/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PHICOMM K2 (PSG1218) devices running V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script. Alternatively, an attacker can leverage unauthenticated access to this script to trigger a reboot using an ifType=reboot action.

Risk Assessment

This vulnerability poses a serious risk to organizations as it allows attackers to remotely execute code and potentially disrupt device operations. This could lead to data loss or system takeover.

Recommendation

It is recommended to update PHICOMM K2 devices to the latest firmware version to mitigate this vulnerability. Additionally, access to ASP scripts should be restricted to authenticated users only.

Original NVD description (English source)

PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action.