NetSight
critical9.8

CVE-2022-4873

On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter.

Impact

On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.

Affected products

VendorProductAffected versions
NetcommwirelessNf20 Firmware
before r6b025
NetcommwirelessNf20mesh Firmware
before r6b025
NetcommwirelessNl1902 Firmware
before r6b025

Weakness classification

References