high8.1
CVE-2025-25246
NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.
Impact
NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| NETGEAR | NETGEAR XR1000 | before 1.0.0.74 |
| XR1000v2 | before 1.1.0.22 | |
| And XR500 | before 2.3.2.134 |
Versions were read from the advisory text. No structured product data has been published for this record yet.