High severity7.5NVD Advisory· Published Nov 11, 2025· Updated Jun 17, 2026

CVE-2025-12943

Description

Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device.

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest.

Fixed in:

RAX30 firmware 1.0.14.108 or later.

RAXE300 firmware 1.0.9.82 or later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Rax30 Firmware
cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*
Range: <1.0.14.108
Netgear/Raxe300 Firmware
cpe:2.3:o:netgear:raxe300_firmware:*:*:*:*:*:*:*:*
Range: <1.0.9.82
Netgear/Nighthawk AX5 5-Stream AX2400 WiFi 6 Routerllm-create
Range: >=1.0.14.108
Netgear/RAX30llm-fuzzy2 versions
>=1.0.14.108+ 1 more
- (no CPE)range: >=1.0.14.108
- (no CPE)range: 0
Netgear/RAXE300llm-fuzzy2 versions
>=1.0.9.82+ 1 more
- (no CPE)range: >=1.0.9.82
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025nvdVendor Advisory
www.netgear.com/support/product/rax30nvdProduct
www.netgear.com/support/product/raxe300nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000