CVE-2022-37780: Phicomm FIR151B Firmware

High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days.

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the pingAddr parameter of the tracert function.

Affected products

• Phicomm FIR151B Firmware: version 3.0.1.17 only
• Phicomm FIR300B Firmware: version 3.0.1.17 only
• Phicomm FIR302E Firmware: version 3.0.1.17 only
• Phicomm FIR303B Firmware: version 3.0.1.17 only

Published 2022-09-07. Last modified 2026-06-17.