CVE-2022-25215

CVE-2022-25215 describes an improper access control vulnerability in Phicomm K2, K2G, K2P, K3, and K3C routers. An unauthenticated remote attacker can exploit this to add or remove MAC addresses from the router's banned host list, effectively preventing those clients from accessing the network or the router itself. With a CVSS score of 5.3 (Medium), this vulnerability is easily exploitable over the network with low attack complexity, impacting network availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.