VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 9, 2025· Updated Jun 17, 2026

CVE-2025-12946

CVE-2025-12946

Description

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run.

This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

38
  • Netgear/Mr90 Firmware
    cpe:2.3:o:netgear:mr90_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.2.46
  • Netgear/Ms90 Firmware
    cpe:2.3:o:netgear:ms90_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.2.46
  • Netgear/Rax35v2 Firmware
    cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.17.142
  • Netgear/Rax41 Firmware
    cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.17.142
  • Netgear/Rax41v2 Firmware
    cpe:2.3:o:netgear:rax41v2_firmware:*:*:*:*:*:*:*:*
    Range: <1.1.6.36
  • Netgear/Rax42 Firmware
    cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.17.142
  • Netgear/Rax42v2 Firmware
    cpe:2.3:o:netgear:rax42v2_firmware:*:*:*:*:*:*:*:*
    Range: <1.1.6.36
  • Netgear/Rax43 Firmware
    cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.17.142
  • Netgear/Rax43v2 Firmware
    cpe:2.3:o:netgear:rax43v2_firmware:*:*:*:*:*:*:*:*
    Range: <1.1.6.36
  • Netgear/Rax45 Firmware
    cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.17.142
  • Netgear/Rax45v2 Firmware
    cpe:2.3:o:netgear:rax45v2_firmware:*:*:*:*:*:*:*:*
    Range: <1.1.6.36
  • Netgear/Rax49s Firmware
    cpe:2.3:o:netgear:rax49s_firmware:*:*:*:*:*:*:*:*
    Range: <1.1.6.36
  • Netgear/Rax50 Firmware
    cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
    Range: <1.2.14.114
  • Netgear/Rax50v2 Firmware
    cpe:2.3:o:netgear:rax50v2_firmware:*:*:*:*:*:*:*:*
    Range: <1.1.6.36
  • Netgear/Rax54sv2 Firmware
    cpe:2.3:o:netgear:rax54sv2_firmware:*:*:*:*:*:*:*:*
    Range: <1.1.6.36
  • Netgear/Raxe450 Firmware
    cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.17.142
  • Netgear/Raxe500 Firmware
    cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*
    Range: <1.2.14.114
  • Netgear/Rs700 Firmware
    cpe:2.3:o:netgear:rs700_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.9.6
  • Netgear/Nighthawk Routersllm-fuzzy
    Range: RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36
  • Netgear/RAX50llm-fuzzy2 versions
    before V1.2.14.114+ 1 more
    • (no CPE)range: before V1.2.14.114
    • (no CPE)range: 0
  • Netgear/RS700llm-fuzzy2 versions
    through 1.0.7.82+ 1 more
    • (no CPE)range: through 1.0.7.82
    • (no CPE)range: 0
  • NETGEAR/MR90v5
    Range: 0
  • NETGEAR/MS90v5
    Range: 0
  • Netgear/RAX35cpe-rescue
    Range: 0
  • Netgear/RAX41cpe-rescue
    Range: 0
  • Netgear/RAX41v2cpe-rescue
    Range: 0
  • Netgear/RAX42v2cpe-rescue2 versions
    0+ 1 more
    • (no CPE)range: 0
    • (no CPE)range: 0
  • Netgear/RAX43cpe-rescue2 versions
    0+ 1 more
    • (no CPE)range: 0
    • (no CPE)range: 0
  • NETGEAR/RAX45v5
    Range: 0
  • NETGEAR/RAX49Sv5
    Range: 0
  • Netgear/RAX5cpe-rescue
    Range: 0
  • NETGEAR/RAX54Sv2v5
    Range: 0
  • Netgear/RAXE450cpe-rescue
    Range: 0
  • Netgear/RAXE500cpe-rescue
    Range: 0

Patches

Vulnerability mechanics

References

18

News mentions

0

No linked articles in our index yet.

CVE-2025-12946 · High · VYPR