Authenticated bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows unauthenticated user to get access to content.

CVE-2022-4874

What is CVE-2022-4874?

An authentication bypass vulnerability exists in specific models of Netcomm routers, including NF20MESH, NF20, and NL1902. This flaw allows an unauthenticated user to bypass login requirements and access sensitive static content by manipulating the URL. The application incorrectly performs a 'fake login' when it detects certain file types (.css, .png, etc.), creating an active session without proper authentication checks. As a result, this vulnerability could lead to exposure of sensitive information and unauthorized access to the router's content.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References