cbcvebase.
CVE-2022-4874
published 2023-01-11

CVE-2022-4874: Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content…

PriorityP356high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
ITW
Exploited in the wild
EPSS
11.01%
95.3th percentile
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it performs a "fake login" to give the request an active session to load the file and not redirect to the login page.

Affected

6 ranges
VendorProductVersion rangeFixed in
netcommnf20——
netcommnf20mesh——
netcommnl1902——
netcommwirelessnf20_firmware< r6b025r6b025
netcommwirelessnf20mesh_firmware< r6b025r6b025
netcommwirelessnl1902_firmware< r6b025r6b025
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.