Netcomm vulnerabilities
8 vulnerabilities
Known vulnerabilities in Netcomm products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
Products
9- 4Gt101W Bootloader3 vulnerabilities
- 4Gt101W Software3 vulnerabilities
- NF202 vulnerabilities
- Nf20Mesh2 vulnerabilities
- Nl19022 vulnerabilities
- Nb13001 vulnerabilities
- Nb16Wv 021 vulnerabilities
- NTC 62001 vulnerabilities
- NWL 2221 vulnerabilities
CVE-2025-4010netcommntc 6200+1
EPSS score0.53%
The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoints of the web interface are vulnerable to arbitrary command injection and use insecure hardcoded passwords. Remote authenticated attackers can gain arbitrary code execution with elevated privileges.CVE-2005-0895netcommnb1300EPSS score2.40%
Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets.CVE-2022-4874netcommnf20+5EPSS score11.01%
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it performs a "fake login" to give the request an active session to load the file and not redirect to the login page.CVE-2022-4873netcommnf20+5EPSS score7.17%
On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known location.CVE-2017-11645netcomm4gt101w_bootloader+1EPSS score1.28%
NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or system_config.html.CVE-2017-11647netcomm4gt101w_bootloader+1EPSS score0.51%
NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation.CVE-2017-11646netcomm4gt101w_bootloader+1EPSS score0.45%
NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device.CVE-2017-5900netcommnb16wv-02_firmwareEPSS score0.87%
Cross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware NB16WV_R0.09 allows remote authenticated users to inject arbitrary web script or HTML via the S801F0334 parameter to hdd.htm.