CVE-2022-4873 Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902

2023-01-1120:39:53

certcc

www.cve.org

cve-2022-4873

netcomm router

stack overflow

buffer overflow

sessionkey parameter

AI Score

9.9

Confidence

High

EPSS

0.002

Percentile

61.7%

JSON

On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.

CNA Affected

[
  {
    "vendor": "Netcomm",
    "product": "NF20",
    "versions": [
      {
        "status": "affected",
        "version": "R6B025"
      }
    ]
  },
  {
    "vendor": "Netcomm",
    "product": "NF20MESH",
    "versions": [
      {
        "status": "affected",
        "version": "R6B025"
      }
    ]
  },
  {
    "vendor": "Netcomm",
    "product": "NL1902",
    "versions": [
      {
        "status": "affected",
        "version": "R6B025"
      }
    ]
  }
]