VU#986018: New Netcomm router models NF20MESH, NF20, and NL1902 vulnerabilities

Overview

Netcomm router models NF20MESH, NF20, and NL1902 running software versions earlier than R6B035 contain two vulnerabilities. The first is an authentication bypass vulnerability that allows an unauthenticated user to access content from both inside and outside the network. The second is a stack-based buffer overflow that allows an instruction pointer to be overwritten on the stack, thereby crashing the application at a known location. The two vulnerabilities, when chained together, permit a remote, unauthenticated attacker to execute arbitrary code. …

access application authentication authentication bypass buffer buffer overflow bypass location netcomm network overflow router software vulnerabilities vulnerability