CVE-2022-4873 — Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902

Description (CNA)

On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.

Affected (CNA)

Vendor / product	Versions
Netcomm / NF20	affected R6B025
Netcomm / NF20MESH	affected R6B025
Netcomm / NL1902	affected R6B025

CWE

No CWE identifiers supplied.

References

https://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md

ADP enrichment

CVE

No English description supplied.

https://github.com/scarvell/advisories/blob/main/2022_netcomm_nf20mesh_unauth_rce.md
https://www.kb.cert.org/vuls/id/986018

CISA-ADP

No English description supplied.

No references supplied.