Description
Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc components. Attackers can inject crafted arguments into these tcpdump launch routines to manipulate executed system commands on the device.
Published: 2026-09-15
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: OS Command Injection
Action: Patch Now
AI Analysis

Impact

Netcore NR255-V version 1.5.130703 contains an OS command argument injection flaw in several tcpdump launch paths such as ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc. By injecting crafted arguments into these routines, an attacker can manipulate the system commands that the device executes, potentially allowing arbitrary command execution on the device.

Affected Systems

Netcore NR255-V routers running firmware version 1.5.130703 are affected. The vulnerable components include the Nettools tcpdump launch paths mentioned above.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity impact. With an EPSS score of less than 1%, the likelihood of exploitation is currently low, and the vulnerability is not listed in the CISA KEV catalog. However, the attack is inferred to be possible through the router’s web interface (CGI) components, which, if accessible to an attacker, could lead to remote command execution. The combination of high severity and low exploitation probability still warrants prompt attention.

Generated by OpenCVE AI on September 18, 2026 at 13:28 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑issued firmware update that fixes the command injection issue.
  • If a patch is unavailable, disable the affected Nettools tcpdump launch paths or restrict access to the web interface components that process CLI arguments.
  • Implement network segmentation and access controls so that only trusted devices can communicate with the router’s management interface.
  • Enable logging and monitor for anomalous command executions or unusual traffic patterns.

Generated by OpenCVE AI on September 18, 2026 at 13:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 17 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Netcore
Netcore nr255-v
Vendors & Products Netcore
Netcore nr255-v

Thu, 17 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 15 Sep 2026 22:00:00 +0000

Type Values Removed Values Added
Description Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc components. Attackers can inject crafted arguments into these tcpdump launch routines to manipulate executed system commands on the device.
Title Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths
Weaknesses CWE-88
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Netcore Nr255-v
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-17T16:53:59.252Z

Reserved: 2026-08-19T21:47:08.935Z

Link: CVE-2026-76862

cve-icon Vulnrichment

Updated: 2026-09-17T16:53:54.555Z

cve-icon NVD

Status : Deferred

Published: 2026-09-15T22:17:00.653

Modified: 2026-09-17T17:16:47.513

Link: CVE-2026-76862

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-18T13:30:09Z

Weaknesses
  • CWE-88

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')