Approved changes feed: RSS · Atom

cpe:2.3:o:netcommwireless:nf20_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorNetcommwireless (84cc03ef-99a2-5f42-9dff-9b16726ecde7)
ProductNf20 Firmware (9a98c6d2-2604-5b4e-95f6-a6c124cacf9d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/Prestaul/skeemas purl2cpe 2026-06-01 10:16:10.514551
pkg:golang/github.com/prestaul/skeemas purl2cpe 2026-06-01 10:16:10.514553
pkg:npm/skeemas purl2cpe 2026-06-01 10:16:10.514554

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4874 vulnerable 2026-06-08 05:52:00.512299 Authenticated bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows unauthenticated user to get access to content.
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it performs a "fake login" to give the request an active session to load the file and not redirect to the login page.
Published: 2023-01-11T20:39:25.219Z
Updated: 2025-11-04T19:14:31.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4873 vulnerable 2026-06-08 05:52:00.506630 Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902
On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.
Published: 2023-01-11T20:39:53.548Z
Updated: 2025-11-04T19:14:30.799Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.