NetSight
IP …
high7.5

CVE-2025-12946

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN si…

Impact

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.

Affected products

VendorProductAffected versions
NetgearRs700 Firmware
before 1.0.9.6
NetgearRax54sv2 Firmware
before 1.1.6.36
NetgearRax45v2 Firmware
before 1.1.6.36
NetgearRax41v2 Firmware
before 1.1.6.36
NetgearRax50 Firmware
before 1.2.14.114
NetgearRaxe500 Firmware
before 1.2.14.114
NetgearRax41 Firmware
before 1.0.17.142
NetgearRax43 Firmware
before 1.0.17.142
NetgearRax35v2 Firmware
before 1.0.17.142
NetgearRaxe450 Firmware
before 1.0.17.142
NetgearRax43v2 Firmware
before 1.1.6.36
NetgearRax42 Firmware
before 1.0.17.142

Weakness classification

CWE-20

References