Netcomm vulnerabilities
We track 3 vulnerabilities in Netcomm products across 5 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2025.
Latest Netcomm vulnerabilities
- 8.6 High severity
NTC 6200: Improper Neutralization of Special Elements used in a Command
The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoints of the web interface are vulnerable to arbitrary command injection and use insecure hardcoded passwords. Remote authenticated attackers c
- 7.5 High severity
NF20: Improper Authentication
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc).
- 9.8 Critical severity
NF20: Out-of-bounds Write
On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known l