CVE-2022-37777: Phicomm FIR151B Firmware

High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days.

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote command execution (RCE) vulnerability via the trHops parameter of the tracert function.

Affected products

• Phicomm FIR151B Firmware: up to and including 3.0.1.17
• Phicomm FIR300B Firmware: up to and including 3.0.1.17
• Phicomm FIR302E Firmware: up to and including 3.0.1.17
• Phicomm FIR303B Firmware: up to and including 3.0.1.17

Published 2022-09-08. Last modified 2026-06-17.