Vulnerabilities

TI-2026-27229 CVE-2026-35019 · GHSA-pqh9-6ffr-v5fc

NetComm NF20MESH < R6B032 Hardcoded AES Key Authentication Bypass

MEDIUM 43

NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by exploiting a hardcoded AES-256 key used t…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00806 Published 2026-06-23 Fixed in R6B032 CWE-321

TI-2026-27228 CVE-2026-35018 · GHSA-jqc2-w244-p56p

NetComm NF20MESH < R6B032 Authenticated RCE via OS Command Injection

HIGH 73

NetComm NF20MESH routers running firmware R6B031 and earlier contain an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands as root by injecting shell metac…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01266 Published 2026-06-23 Fixed in R6B032 CWE-78

TI-2022-04466 CVE-2022-4873 · GHSA-5fm2-88hc-cx64

Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902

MEDIUM 59

On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0717 Published 2023-01-11 No fix listed CWE-787

TI-2022-04467 CVE-2022-4874 · GHSA-6pwv-hr7p-g77v

Improper authentication in Netcomm NF20

HIGH 72

Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.11009 Published 2023-01-11 No fix listed CWE-287

TI-2018-10615 CVE-2018-14785 · GHSA-h2g8-2825-prfr

Information disclosure in ICS-CERT NetComm Wireless G LTE Light Industrial M2M Router…

LOW 37

NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0213 Published 2018-08-10 No fix listed CWE-548

TI-2018-10614 CVE-2018-14784 · GHSA-gjcp-8fc6-8c66

Cross-site scripting in ICS-CERT NetComm Wireless G LTE Light Industrial M2M Router with…

LOW 29

NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00977 Published 2018-08-10 No fix listed CWE-79

TI-2018-10613 CVE-2018-14783 · GHSA-8865-9mxr-6g3g

Cross-site request forgery in ICS-CERT NetComm Wireless G LTE Light Industrial M2M Router…

LOW 39

NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00662 Published 2018-08-10 No fix listed CWE-352

TI-2018-10612 CVE-2018-14782 · GHSA-c9h3-cr9m-xr3g

Information disclosure in ICS-CERT NetComm Wireless G LTE Light Industrial M2M Router…

LOW 36

NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01598 Published 2018-08-10 No fix listed CWE-200

TI-2015-05095 CVE-2015-6024 · GHSA-r5j6-vjxh-3v3w

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before…

MEDIUM 64

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the DIA_IPADDRESS pa…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.26104 Published 2017-02-09 No fix listed CWE-77

TI-2015-05094 CVE-2015-6023 · GHSA-3252-v683-v8qv

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before…

MEDIUM 45

ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypass intended access restrictions via a direct request.

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.10983 Published 2017-02-09 No fix listed CWE-284

TI-2014-04008 CVE-2014-4871 · GHSA-p92w-6px6-8hjc

Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N…

LOW 22

Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via the wlWpa…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01107 Published 2014-10-07 No fix listed CWE-79

Vulnerabilities

Filters