Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
netcommwireless vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-4873
On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.
Netcommwireless Nf20 Firmware
Netcommwireless Nf20mesh Firmware
Netcommwireless Nl1902 Firmware
NA
CVE-2022-4874
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it pe...
Netcommwireless Nf20 Firmware
Netcommwireless Nf20mesh Firmware
Netcommwireless Nl1902 Firmware
4.3
CVSSv2
CVE-2014-4871
Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote malicious users to inject arbitrary web script or HTML via the wlWpaPsk parameter.
Netcommwireless Nb604n Firmware
Netcommwireless Nb604n -
5
CVSSv2
CVE-2018-14785
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication.
Netcommwireless Nwl-25 Firmware
5
CVSSv2
CVE-2018-14782
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The device allows access to configuration files and profiles without authenticating the user.
Netcommwireless Nwl-25 Firmware
6.8
CVSSv2
CVE-2018-14783
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. A cross-site request forgery condition can occur, allowing an malicious user to change passwords of the device remotely.
Netcommwireless Nwl-25 Firmware
4.3
CVSSv2
CVE-2018-14784
NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The device is vulnerable to several cross-site scripting attacks, allowing a remote malicious user to run arbitrary code on the device.
Netcommwireless Nwl-25 Firmware
7.5
CVSSv2
CVE-2015-6023
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware prior to 3G10WVE-L101-S306ETS-C01_R05 allows remote malicious users to bypass intended access restrictions via a direct request. NOTE: this issue can be combined with CVE-2015-6024 to execute arbitrary comman...
Netcommwireless Hspa 3g10wve Firmware 3g10wve-l101-s306ets-c01 R03
1 EDB exploit
10
CVSSv2
CVE-2015-6024
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware prior to 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS parameter.
Netcommwireless Hspa 3g10wve Firmware 3g10wve-l101-s306ets-c01 R03
1 EDB exploit
NA
CVE-2015-60232
NetCommWireless HSPA 3G10WVE suffers from authentication bypass and remote code execution vulnerabilities.
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907
hardcoded
inject
CVE-2024-20359
CVE-2024-2467
CVE-2024-4077
CVE-2024-22391
camera
CVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »