Lucene search
+L

377 matches found

NVD
NVD
•added 2025/12/09 5:15 p.m.•26 views

CVE-2025-12946

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

7.5CVSS0.00293EPSS
SaveExploits0References18
Cvelist
Cvelist
•added 2025/12/09 5:02 p.m.•47 views

CVE-2025-12946 Improper input validation in NETGEAR Nighthawk routers

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

7.3CVSS0.00293EPSS
SaveExploits0References18
CVE
CVE
•added 2025/12/09 5:02 p.m.•66 views

CVE-2025-12946

CVE-2025-12946 affects NETGEAR Nighthawk routers and related models (RS700, RAX54Sv2, RAX41v2, RAX50, RAXE500, RAX41, RAX43, RAX35v2, RAXE450, RAX43v2, RAX42, RAX45, RAX50v2, MR90, MS90, RAX42v2, RAX49S). Root cause is improper input validation in the speedtest feature, enabling WAN-side attacker...

7.5CVSS6AI score0.00293EPSS
SaveExploits0References18Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/09 5:02 p.m.•11 views

CVE-2025-12946 Improper input validation in NETGEAR Nighthawk routers

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

7.3CVSS6AI score0.00293EPSS
SaveExploits0References18
CVE
CVE
•added 2025/12/09 5:01 p.m.•84 views

CVE-2025-12945

The CVE-2025-12945 entry concerns NETGEAR Nighthawk R7000P routers with versions up to 1.3.3.154. The vulnerability is an OS command injection caused by improper input validation when accessed by an authenticated administrator. Impact is limited to the affected device where an admin could inject ...

7.2CVSS6.2AI score0.01141EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/09 5:01 p.m.•10 views

CVE-2025-12945 Improper input validation in NETGEAR Nighthawk router R7000P

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P end of service routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting it...

4.8CVSS6.2AI score0.01141EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/09 5:01 p.m.•45 views

CVE-2025-12945 Improper input validation in NETGEAR Nighthawk router R7000P

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P end of service routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting it...

4.8CVSS0.01141EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•20 views

PT-2025-50104

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk R7000P versions through 1.3.3.154 Description A flaw exists in NETGEAR Nighthawk R7000P routers that allows an authenticated administrator to execute OS command injections. This is caused by insufficient input validation. The...

4.8CVSS7.2AI score0.01141EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•20 views

NETGEAR多款产品 安全漏洞

NETGEAR Nighthawk is a series of wireless routers from NETGEAR. A security vulnerability exists in various NETGEAR products that stems from improper input validation for the speedtest feature, which could allow an attacker to use man-in-the-middle techniques to manipulate DNS responses and execut...

7.5CVSS6.8AI score0.00293EPSS
SaveExploits0References18
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•22 views

NETGEAR Nighthawk 安全漏洞

NETGEAR Nighthawk is a series of wireless routers from NETGEAR. A security vulnerability exists in the NETGEAR Nighthawk R7000P 1.3.3.154 and prior versions, which stems from improper input validation and could lead to an authenticated administrator performing an OS command injection attack...

7.2CVSS7.1AI score0.01141EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•4 views

CVE-2025-12946: Improper Input Validation

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

7.5CVSS6AI score0.00293EPSS
SaveExploits0References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•6 views

CVE-2025-12945: Improper Input Validation

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P end of service routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting it...

7.2CVSS6.1AI score0.01141EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•19 views

PT-2025-50105

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk routers versions 1.0.7.82 and earlier NETGEAR RAX54Sv2 versions before V1.1.6.36 NETGEAR RAX41v2 versions before V1.1.6.36 NETGEAR RAX50 versions before V1.2.14.114 NETGEAR RAXE500 versions before V1.2.14.114 NETGEAR RAX41...

7.3CVSS6.8AI score0.00293EPSS
SaveExploits0References21
CVE
CVE
•added 2025/11/11 4:17 p.m.•41 views

CVE-2025-12943

CVE-2025-12943 involves NETGEAR RAX30 and RAXE300 devices, where improper certificate validation in the firmware update logic lets an attacker who can intercept and modify traffic potentially execute arbitrary commands on the device. Affected products: NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400...

7.7CVSS8.1AI score0.00156EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-5696

Malware in sbrugna...

8.1CVSS7.5AI score0.00689EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-5697

Malware in sbrugna...

10CVSS8.2AI score0.02727EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2019-4106

Malware in sbrugna...

9.8CVSS8.1AI score0.02324EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-4107

Malware in sbrugna...

6.1CVSS6.3AI score0.00974EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2019-4105

Malware in sbrugna...

9.1CVSS8.1AI score0.00729EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-14018

Malware in sbrugna...

8.8CVSS7.8AI score0.01127EPSS
SaveExploits0References3
Rows per page
Query Builder