Low severity2.4NVD Advisory· Published Dec 9, 2025· Updated Aug 26, 2026

CVE-2025-12945

Description

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability.

This issue affects R7000P: through 1.3.3.154.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/R7000p Firmware
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
Range: <=1.3.3.154
Netgear/Nighthawk R7000llm-fuzzy
Range: <=1.3.3.154
Netgear/R7000cpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

www.netgear.com/support/product/r7000pnvdPatchProduct
kb.netgear.com/000070416/December-2025-NETGEAR-Security-AdvisorynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.156
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000