CVE-2025-12944

Improper input validation in NETGEAR DGN2200v4 N300 Wireless ADSL2+ Modem Router allows attackers with direct network access to the device to potentially execute code on the device. Please check the firmware version and update to the latest. Fixed in: DGN2200v4 firmware 1.0.0.132 or later...

CVE-2025-12943

Improper certificate validation in firmware update logic in NETGEAR RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router and RAXE300 Nighthawk AXE7800 Tri-Band WiFi 6E Router allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the...

CVE-2025-12940

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points. An user having access to the syslog server can read the logs containing these credentials. This issue affects...

CVE-2025-24918

Improper link resolution before file access 'link following' for some IntelR Server Configuration Utility software and IntelR Server Firmware Update Utility software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an...

CVE-2025-24918

CVE-2025-24918 affects Intel Server Configuration Utility software and Intel Server Firmware Update Utility software prior to version 16.0.12. The root cause is improper link resolution before file access (link following) in Ring 3 user applications, potentially enabling privilege escalation. Loc...

CVE-2025-12944

Summary : CVE-2025-12944 concerns NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) with improper input validation that may allow an attacker with direct network access to execute code on the device. The issue is associated with the DGN2200v4 firmware and is fixed in firmware version 1.0.0.13...

CVE-2025-12944 Improper input validation in NETGEAR DGN2200v4

Improper input validation in NETGEAR DGN2200v4 N300 Wireless ADSL2+ Modem Router allows attackers with direct network access to the device to potentially execute code on the device. Please check the firmware version and update to the latest. Fixed in: DGN2200v4 firmware 1.0.0.132 or later...

CVE-2025-12944 Improper input validation in NETGEAR DGN2200v4

Improper input validation in NETGEAR DGN2200v4 N300 Wireless ADSL2+ Modem Router allows attackers with direct network access to the device to potentially execute code on the device. Please check the firmware version and update to the latest. Fixed in: DGN2200v4 firmware 1.0.0.132 or later...

CVE-2025-12943 Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300

Improper certificate validation in firmware update logic in NETGEAR RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router and RAXE300 Nighthawk AXE7800 Tri-Band WiFi 6E Router allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the...

CVE-2025-12943 Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300

Improper certificate validation in firmware update logic in NETGEAR RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router and RAXE300 Nighthawk AXE7800 Tri-Band WiFi 6E Router allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the...

CVE-2025-12943

CVE-2025-12943 involves NETGEAR RAX30 and RAXE300 devices, where improper certificate validation in the firmware update logic lets an attacker who can intercept and modify traffic potentially execute arbitrary commands on the device. Affected products: NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400...

CVE-2025-12940 Credentials recorded in logs in NETGEAR WAX610 and WAX610Y

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points. An user having access to the syslog server can read the logs containing these credentials. This issue affects...

PT-2025-46399

Name of the Vulnerable Software and Affected Versions IntelR Server Configuration Utility software and IntelR Server Firmware Update Utility software versions prior to 16.0.12 Description A flaw exists in link resolution before file access 'link following' within Ring 3: User Applications,...

Intel® Slim Bootloader Advisory

Summary: A potential security vulnerability in the Intel® Slim Bootloader may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35968 Description: Protection mechanism failure in the UEFI firmware fo...

NETGEAR RAX30和NETGEAR RAXE300 安全漏洞

NETGEAR RAX30 and NETGEAR RAXE300 are both products of NETGEAR, Inc.NETGEAR RAX30 is a dual-band wireless router.NETGEAR RAXE300 is a wireless router. A security vulnerability exists in the NETGEAR RAX30 and RAXE300 that stems from improper certificate validation in the firmware update logic, whi...

Intel UEFI Server Firmware Advisory

Summary: A potential security vulnerability for some Intel reference platforms may allow escalation of privilege or denial of service. Intel is releasing UEFI reference updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-30185 Description: Active debug code fo...

Intel® Server Configuration Utility Software Advisory

Summary: A potential security vulnerability in some Intel® Server Configuration Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24918 Description: Improper link resolution befo...

PT-2025-46372

Name of the Vulnerable Software and Affected Versions NETGEAR DGN2200v4 versions prior to 1.0.0.132 Description A flaw exists in input validation within the NETGEAR DGN2200v4 N300 Wireless ADSL2+ Modem Router. This issue allows attackers with direct network access to potentially execute code on t...

PT-2025-46177

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 multi Description A stack-based buffer overflow issue exists in Tenda AC18 version 15.03.05.05 multi. The issue is located in the guestSsid parameter of the /goform/WifiGuestSet API endpoint. Sending oversized da...

PT-2025-46176

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 multi Description A stored cross-site scripting XSS issue exists in Tenda AC18. The issue is located in the ssid parameter within the wireless settings. An attacker can inject malicious payloads that will execute...