CyberSecBulletin

Netcommwireless vulnerabilities

We track 2 vulnerabilities in Netcommwireless products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 11, 2023.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Netcommwireless vulnerabilities

  • 7.5 High severity

    NF20: Improper Authentication

    CVE-2022-4874NetcommEPSS 11%

    Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc).

  • 9.8 Critical severity

    NF20: Out-of-bounds Write

    CVE-2022-4873NetcommEPSS 7.17%

    On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known l