Threat Investigation
Request a demo

CVE-2022-4874

High

Description

Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it performs a "fake login" to give the request an active session to load the file and not redirect to the login page.

SeverityHigh
CVSS7.5
Exploit probability96. percentile11%
ProductNetcommwireless Nf20 Firmware
PublishedJan 11, 2023
First seenJan 11, 2023
Weakness typeCWE-288CWE-288

How to fix

Update
  • netcommwireless nf20_firmwarer6b025 or later
  • netcommwireless nf20mesh_firmwarer6b025 or later
  • netcommwireless nl1902_firmwarer6b025 or later

Affected products

ProductAffected versionsFixed in
netcommwireless nf20_firmwarev < r6b025r6b025
netcommwireless nf20mesh_firmwarev < r6b025r6b025
netcommwireless nl1902_firmwarev < r6b025r6b025

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.