Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

CVE-2022-4874

Authenticated bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows unauthenticated user to get access to content.

Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it performs a "fake login" to give the request an active session to load the file and not redirect to the login page.

CVSS 3.1 · 7.5 High EPSS 11.0% KEV · Not listed
Vendors
Netcommwireless
Products
Nf20 Nf20 Firmware Nf20mesh and 3 more
CVE-2022-4873

Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902

On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.

CVSS 3.1 · 9.8 Critical EPSS 7.2% KEV · Not listed
Vendors
Netcommwireless
Products
Nf20 Nf20 Firmware Nf20mesh and 3 more