high7.5
CVE-2025-44650
In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file.
Impact
In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file. This can cause DoS attacks when unlimited users are connected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | R7000 Firmware | Version 1.3.1.64_10.1.36 |
| Netgear | Eax80 Firmware | Version 1.0.1.70_1.0.2 |