CVE:CVE-2022-4873
CNNVD:CNNVD-202301-917
Netcomm NF20和Netcomm NF20MESH都是澳大利亚Netcomm公司的一款路由器。
Netcomm路由器存在安全漏洞，该漏洞源于其sessionKey参数允许攻击者通过提供特定的字节数覆盖栈上的指令指针实现基于栈的缓冲区溢出并在已知位置使应用程序崩溃。以下型号受到影响：NF20MESH、NF20和NL1902。
solution:Upgrade netcommwireless nf20_firmware to a higher version than r6b025,and avoid the version (,r6b025); Upgrade netcommwireless nf20mesh_firmware to a higher version than r6b025,and avoid the version (,r6b025); Upgrade netcommwireless nl1902_firmware to a higher version than r6b025,and avoid the version (,r6b025)