Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call.