CRITICAL
Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902
Published Jan 11, 2023
9.8
CRITICALCVSS 3.1
EPSS 7.17%
Description
On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.
Affected products
-
- Version R6B025StatusaffectedConstraints-
- Version
-
- Version R6B025StatusaffectedConstraints-
- Version
-
- Version R6B025StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
Configuration 1
AND
- < r6b025
Running on/with
- n/a
Configuration 2
AND
- < r6b025
Running on/with
- n/a
Configuration 3
AND
- < r6b025
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-52133 Advisory
- https://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md ExploitThird Party Advisory
- https://www.kb.cert.org/vuls/id/986018
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-52133 | Advisory | |
| https://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md | ExploitThird Party Advisory | |
| https://www.kb.cert.org/vuls/id/986018 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner certcc
Published Jan 11, 2023
Updated Nov 4, 2025
Reserved Jan 4, 2023
Link CVE-2022-4873
CISA Vulnrichment
Updated Apr 9, 2025
ENISA EUVD
EUVD-2022-52133 Assigner certcc
Published Jan 11, 2023
Updated Nov 4, 2025
Exploited since n/a
Link EUVD-2022-52133