NF20 vulnerabilities

2 known vulnerabilities in NF20 from Netcomm. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  NF20: Improper Authentication

  CVE-2022-4874Jan 11, 2023NetcommEPSS 11%

  Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc).

• 9.8 Critical severity

  NF20: Out-of-bounds Write

  CVE-2022-4873Jan 11, 2023NetcommEPSS 7.17%

  On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known l