Description
Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as one decoding to a single character, to protected routes like /router/get_user_type.cgi to kill the main Boa process and deny management interface access.
Published: 2026-10-16
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Patch Now
AI Analysis

Impact

Netcore NR256CN routers running Boa Web Server versions up to 1.5.140116 contain a NULL pointer dereference flaw in the user_auth() function. Unauthenticated attackers can send a malformed Basic Authorization header lacking a colon, triggering a crash of the Boa process. The result is a denial of service that takes the management interface offline, preventing any further configuration or monitoring via the web interface. This vulnerability is identified as CWE‑476.

Affected Systems

The affected systems are Netcore NR256CN routers with the Boa Web Server version 1.5.140116 or earlier. All firmware releases managed by this product line are susceptibility until a patched firmware version is deployed.

Risk and Exploitability

The CVSS score of 8.7 classifies this flaw as high severity. While an EPSS score is not available, the lack of authentication requirements and the simple malformed header payload make exploitation straightforward for anyone with network access to the router’s management interface. Because the vulnerability is not listed in the CISA KEV catalog, there is no known widely deployed exploit yet, but the potential impact of a DoS on critical network equipment warrants immediate attention.

Generated by OpenCVE AI on October 16, 2026 at 18:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the router firmware to a version that includes the Boa web server fix, i.e., a release newer than 1.5.140116.
  • Restrict access to the router’s management interface by applying network segmentation or firewall rules that allow only trusted IP addresses to reach the web interface.
  • Monitor log files for repeated malformed Authorization header attempts and investigate any unauthorized access signatures.

Generated by OpenCVE AI on October 16, 2026 at 18:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 16 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
Description Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as one decoding to a single character, to protected routes like /router/get_user_type.cgi to kill the main Boa process and deny management interface access.
Title Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS
Weaknesses CWE-476
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-16T17:40:00.612Z

Reserved: 2026-10-16T14:31:23.090Z

Link: CVE-2026-111710

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-16T18:17:55.207

Modified: 2026-10-16T19:03:18.127

Link: CVE-2026-111710

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-16T19:00:11Z

Weaknesses