CVE-2022-4874 - CVE House
Back to Database
Status published Unknown CVE-2022-4874

Authenticated bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows unauthenticated user to get access to content.

Vulnerability Description

Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it performs a "fake login" to give the request an active session to load the file and not redirect to the login page.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4874

Credits & Attribution

No credits recorded in the NVD database.

References

More from Netcomm

View All →
CVE-2025-4010
Arbitrary Command Injection in Netcom NTC-6200 & NWL-222
High 8.6
CVE-2022-4873
Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902
Unknown 0

Affected Vendor

Affected Software

NF20, NF20MESH, NL1902
Vulnerable Versions:
R6B025

Timeline

Official Publish: January 11th, 2023
Last Modified: November 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.