CVE-2025-12946mediumCWE-20

CVE-2025-12946: falha de média gravidade em NETGEAR RS700

Improper input validation in NETGEAR Nighthawk routers

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar RAX43+ Monitorar RAX50

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.4epss 0.3%
A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/S:N/AU:N/R:A/V:D/RE:M/U:Amber
Produtos afetados
NETGEAR · MR90NETGEAR · MS90NETGEAR · RAX35v2NETGEAR · RAX41NETGEAR · RAX41v2NETGEAR · RAX42NETGEAR · RAX42v2NETGEAR · RAX43NETGEAR · RAX43v2NETGEAR · RAX45NETGEAR · RAX49SNETGEAR · RAX50NETGEAR · RAX50v2NETGEAR · RAX54Sv2NETGEAR · RAXE450NETGEAR · RAXE500NETGEAR · RS700
CVEs relacionadas — NETGEAR RS700

No mesmo produto, das mais perigosas para as menos.

CVE-2026-11739MEDIUMCommand injection vulnerability in some NETGEAR Nighthawk devicesEPSS 2.5%CVE-2026-11734LOWDevice administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.EPSS 0.9%CVE-2026-11736LOWStack-based buffer overflow vulnerability in some NETGEAR Nighthawk routersEPSS 0.8%CVE-2026-11735LOWStack-based buffer overflow vulnerability in some NETGEAR Nighthawk modelsEPSS 0.8%CVE-2026-0418MEDIUMCertain NETGEAR devices allow administrators to tamper with systemEPSS 0.2%CVE-2026-0417MEDIUMInsufficient input validation in certain NETGEAR routersEPSS 0.2%