CVE-2022-4873

Summary

On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.

Affected Software

Weaknesses

• CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md
• https://www.kb.cert.org/vuls/id/986018

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md

• ←Previous
• Next→