TI-2025-03553 Aliases CVE-2025-4010 GHSA-vm5x-pcv8-r553

Arbitrary Command Injection in Netcom NTC-6200 & NWL-222

MEDIUM 40CWE-77Published 2025-06-02 · Updated 2025-06-02

Key facts

Attack vector: Adjacent network
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-77.

Summary

The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoints of the web interface are vulnerable to arbitrary command injection and use insecure hardcoded passwords. Remote authenticated attackers can gain arbitrary code execution with elevated privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00551 46th percentileScored 2026-11-07

Fix Fixed NWL-222 (Netcomm): 2.1.21.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Netcomm	NTC 6200	all versions	—	No fix listed	CNA
Netcomm	NWL-222	before 2.1.21.1	2.1.21.1	Patch available	CNA

NTC 6200 VendorNetcomm Affected all versions Fixed in — No fix listed CNA
NWL-222 VendorNetcomm Affected before 2.1.21.1 Fixed in 2.1.21.1 Patch available CNA

Remediation

Fix · CNA NWL-222 (Netcomm) Fixed in 2.1.21.1

Timeline

2026-10-02 Threatist record created from CVE-2025-4010
2026-10-03 Alias added: GHSA-vm5x-pcv8-r553

References

Advisory 1

https://www.onekey.com/resource/security-advisory-remote-command-execution-on-netcomm-ntc-6200-and-nwl-222

TI-2022-04467 Improper authentication in Netcomm NF20 CVSS 3.1HIGH 7.5
TI-2022-04466 Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902 CVSS 3.1CRITICAL 9.8
TI-2017-08620 NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader… CVSS 3.0CRITICAL 9.8
TI-2017-08621 NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader… CVSS 3.0HIGH 8.8
TI-2005-00838 Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device… CVSS 2.0MEDIUM 5.0
TI-2017-03828 Cross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware… CVSS 3.0MEDIUM 5.4

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences