Netcore NBR100V2: Integer overflow in msg_aes_dec (CVE-2026-121382)
An integer overflow vulnerability exists in the msg_aes_dec function of the /usr/bin/auto_ac file in Netcore NBR100V2 version 1.3.240614.030928, allowing for remote exploitation.
CVE search metadata
CVE search record: CVE-2026-121382. Severity: high. CVSS: 7.5. KEV: no. Product: NBR100V2 (1.3.240614.030928). Brief: Netcore NBR100V2: Integer overflow in msg_aes_dec (CVE-2026-121382). Brief link: https://feed.craftedsignal.io/briefs/2026-11-03-netcore-nbr100v2-cve-2026-121382/
Triage facts
Revision 1- Applicability
- NBR100V2 (1.3.240614.030928)
- Evidence
- Unknown
- Severity
- Low
- Sources
- 1 public source
- Freshness
- Revision 1Nov 3, 20:00 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability exists in the msg_aes_dec function of the /usr/bin/auto_ac file in Netcore NBR100V2 1.3.240614.030928. This flaw causes an integer overflow and is susceptible to remote exploitation. The exploit has been publicly disclosed. The vendor was contacted regarding this disclosure but did not respond.