PatchTheCVECVE-2022-4874: Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to ac
CVE-2022-4874 is a high-severity flaw (CVSS 7.5) affecting nf20 firmware, nf20mesh firmware, nl1902 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it performs a "fake login" to give the request an active session to load the file and not redirect to the login page.
Why this priority
- High severity
- EPSS top 4%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 11.0% (top 4%) |
| CISA exploited list | No |
| Weakness | CWE-287 |
| Published | 2023-01-11 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-4874?
nf20 firmware: upgrade to r6b025; nf20mesh firmware: upgrade to r6b025; nl1902 firmware: upgrade to r6b025. Exact commands for each OS are on this page.
Is CVE-2022-4874 being exploited?
CVE-2022-4874 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-4874 affect?
CVE-2022-4874 affects nf20 firmware, nf20mesh firmware, nl1902 firmware. Severity is high (CVSS 7.5). Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the U
How urgent is CVE-2022-4874?
Priority 60/100. High severity; EPSS top 4%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2022-4873 CRITICAL 9.8 UPGRADE UPGRADE On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey param