Threat Investigation
Request a demo

CVE-2022-4873

Critical

Description

On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.

SeverityCritical
CVSS9.8
Exploit probability—
ProductNetcommwireless Nf20 Firmware
PublishedJan 11, 2023
First seenJan 11, 2023
Weakness typeCWE-120CWE-120

How to fix

Update
  • netcommwireless nf20_firmwarer6b025 or later
  • netcommwireless nf20mesh_firmwarer6b025 or later
  • netcommwireless nl1902_firmwarer6b025 or later

Affected products

ProductAffected versionsFixed in
netcommwireless nf20_firmwarev < r6b025r6b025
netcommwireless nf20mesh_firmwarev < r6b025r6b025
netcommwireless nl1902_firmwarev < r6b025r6b025

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.