CVE-2022-4873

Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902

Critical · published January 11, 2023

CVSS v3.1
9.8
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

🚨 A crafty stack-based buffer overflow is lurking in Netcomm routers NF20MESH, NF20, and NL1902! Just a precise number of bytes can crash your device by overwriting the sessionKey parameter. 🔥 Think of your router as a high-tech hotel. The sessionKey is your room keycard, and when too many guests try to crowd through the door at once, the whole system crashes, leaving everyone standing in the hallway. An attacker could exploit this vulnerability to overwrite the instruction pointer, potentially crashing your router and leaving your network exposed. Imagine your internet connection going dark at the most inconvenient time! This could lead to a denial of service, disrupting your daily activities and putting sensitive information at risk.

Put simply

Think of your router as a high-tech hotel. The sessionKey is your room keycard, and when too many guests try to crowd through the door at once, the whole system crashes, leaving everyone standing in the hallway. This vulnerability arises from a stack-based buffer overflow, where a specific input length allows the attacker to overwrite the instruction pointer on the stack, causing the application to crash at a predictable location.

What to do

An attacker could exploit this vulnerability to overwrite the instruction pointer, potentially crashing your router and leaving your network exposed. Imagine your internet connection going dark at the most inconvenient time! This could lead to a denial of service, disrupting your daily activities and putting sensitive information at risk. To protect your network, immediately patch your Netcomm router to the latest firmware version provided by the manufacturer. If updates are not available, consider replacing your router with a more secure model. It's crucial to regularly check for updates to avoid similar issues in the future. You've got this! With a quick update, you'll secure your network and keep those pesky vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.07170 · 94.3th percentile
Published
2023-01-11T20:39Z
EPSS history
Timeline
  • 11 JAN 20:39Z
    Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902
    cvelistv5