High severity7.5NVD Advisory· Published Dec 9, 2025· Updated Jun 17, 2026

CVE-2025-12946

Description

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run.

This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Mr90 Firmware
cpe:2.3:o:netgear:mr90_firmware:*:*:*:*:*:*:*:*
Range: <1.0.2.46
Netgear/Ms90 Firmware
cpe:2.3:o:netgear:ms90_firmware:*:*:*:*:*:*:*:*
Range: <1.0.2.46
Netgear/Rax35v2 Firmware
cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*
Range: <1.0.17.142
Netgear/Rax41 Firmware
cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:*
Range: <1.0.17.142
Netgear/Rax41v2 Firmware
cpe:2.3:o:netgear:rax41v2_firmware:*:*:*:*:*:*:*:*
Range: <1.1.6.36
Netgear/Rax42 Firmware
cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*
Range: <1.0.17.142
Netgear/Rax42v2 Firmware
cpe:2.3:o:netgear:rax42v2_firmware:*:*:*:*:*:*:*:*
Range: <1.1.6.36
Netgear/Rax43 Firmware
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
Range: <1.0.17.142
Netgear/Rax43v2 Firmware
cpe:2.3:o:netgear:rax43v2_firmware:*:*:*:*:*:*:*:*
Range: <1.1.6.36
Netgear/Rax45 Firmware
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
Range: <1.0.17.142
Netgear/Rax45v2 Firmware
cpe:2.3:o:netgear:rax45v2_firmware:*:*:*:*:*:*:*:*
Range: <1.1.6.36
Netgear/Rax49s Firmware
cpe:2.3:o:netgear:rax49s_firmware:*:*:*:*:*:*:*:*
Range: <1.1.6.36
Netgear/Rax50 Firmware
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
Range: <1.2.14.114
Netgear/Rax50v2 Firmware
cpe:2.3:o:netgear:rax50v2_firmware:*:*:*:*:*:*:*:*
Range: <1.1.6.36
Netgear/Rax54sv2 Firmware
cpe:2.3:o:netgear:rax54sv2_firmware:*:*:*:*:*:*:*:*
Range: <1.1.6.36
Netgear/Raxe450 Firmware
cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:*
Range: <1.0.17.142
Netgear/Raxe500 Firmware
cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*
Range: <1.2.14.114
Netgear/Rs700 Firmware
cpe:2.3:o:netgear:rs700_firmware:*:*:*:*:*:*:*:*
Range: <1.0.9.6
Netgear/Nighthawk Routersllm-fuzzy
Range: RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36
Netgear/RAX50llm-fuzzy2 versions
before V1.2.14.114+ 1 more
- (no CPE)range: before V1.2.14.114
- (no CPE)range: 0
Netgear/RS700llm-fuzzy2 versions
through 1.0.7.82+ 1 more
- (no CPE)range: through 1.0.7.82
- (no CPE)range: 0
Netgear/MR90cpe-rescue
Range: 0
Netgear/MS90cpe-rescue
Range: 0
Netgear/RAX35cpe-rescue
Range: 0
Netgear/RAX41cpe-rescue
Range: 0
Netgear/RAX41v2cpe-rescue
Range: 0
Netgear/RAX42v2cpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0
Netgear/RAX43cpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0
Netgear/RAX45cpe-rescue
Range: 0
NETGEAR/RAX49Sv5
Range: 0
Netgear/RAX5cpe-rescue
Range: 0
NETGEAR/RAX54Sv2v5
Range: 0
Netgear/RAXE450cpe-rescue
Range: 0
Netgear/RAXE500cpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

kb.netgear.com/000070416/December-2025-NETGEAR-Security-AdvisorynvdPatchVendor Advisory
www.netgear.com/support/product/RAX50nvdPatchProduct
www.netgear.com/support/product/mr90nvdPatchProduct
www.netgear.com/support/product/ms90nvdPatchProduct
www.netgear.com/support/product/rax35v2nvdPatchProduct
www.netgear.com/support/product/rax41nvdPatchProduct
www.netgear.com/support/product/rax41v2nvdPatchProduct
www.netgear.com/support/product/rax42nvdPatchProduct
www.netgear.com/support/product/rax42v2nvdPatchProduct
www.netgear.com/support/product/rax43nvdPatchProduct
www.netgear.com/support/product/rax43v2nvdPatchProduct
www.netgear.com/support/product/rax45nvdPatchProduct
www.netgear.com/support/product/rax49snvdPatchProduct
www.netgear.com/support/product/rax50v2nvdPatchProduct
www.netgear.com/support/product/rax54sv2nvdPatchProduct
www.netgear.com/support/product/raxe450nvdPatchProduct
www.netgear.com/support/product/raxe500nvdPatchProduct
www.netgear.com/support/product/rs700nvdPatchProduct

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000