Description


A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter_arp_put_file_cgi of the file /router/filter_arp_put_file.cgi. The manipulation of the argument put_file leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Related CPE's


Could not find any relations

Weaknesses



CWE-119CWE-125

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 · High

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-12T16:17:03.917Z

22 hours ago

Last modified

2026-10-13T13:29:12.567Z

1 hour ago