CVEvulnerability

CVE-2025-12945

1.1 LOW Published 2025-12-09 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2025-12-09
Last modified
2026-10-08
Assigner
a2826606-91e7-4eb6-899e-8484bd4575d5
CVSS 4.0 (a2826606-91e7-4eb6-899e-8484bd4575d5)
1.1 LOW — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber
CVSS 3.1 (a2826606-91e7-4eb6-899e-8484bd4575d5)
2.4 LOW — CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability. This issue affects R7000P: through 1.3.3.154.

Affected configurations

• netgear r7000p firmware (<= 1.3.3.154)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References