CVE-2022-4873

 

Published at: - 11-01-2023 10:15

Last modified: - 20-01-2023 04:16

Total changes: - 4

Description

On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md

 

Keywords

NVD

 

CVE-2022-4873

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures