CVE-2022-4874

CVE-2022-4874 is an authentication bypass vulnerability affecting Netcomm router models NF20MESH, NF20, and NL1902. An unauthenticated attacker can exploit a flaw in how the router serves static content, which performs a "fake login" for specific file types, to gain unauthorized access. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity, requiring no user interaction, and potentially leading to high confidentiality impact. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity landscape.