CVE-2022-4873 Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902
A stack-based buffer overflow in Netcomm routers allows attackers to crash the application by overwriting the instruction pointer via the sessionKey parameter.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-4873?
CVE-2022-4873 is a critical memory corruption vulnerability in Netcomm NF20, published on 11 Jan 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.
Weakness: CWE-787
Which versions are affected by CVE-2022-4873?
It affects 3 products.
Products include Netcommwireless Nf20 Firmware, Netcommwireless Nf20mesh Firmware, Netcommwireless Nl1902 Firmware.
How do I fix CVE-2022-4873?
No fix has been published for CVE-2022-4873 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-4873 being exploited?
There is no known exploitation of CVE-2022-4873 in the wild and no public exploit code.
Other vulnerabilities in Netcomm NF20
Sources
Also known as GHSA-5fm2-88hc-cx64.