Vulnerability · Published Jan 11, 2023 · Assigned by certcc
CVE-2022-4873Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902
Critical 9.8
In plain English
A critical-severity security flaw in NF20 from Netcomm. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 7.2% (higher than 94% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)7.2%top 5.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.