Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

RAX43v2

Source -

CNA

CNA CVEs -

1

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
1Vulnerabilities found
CVE-2025-12946
Assigner-a2826606-91e7-4eb6-899e-8484bd4575d5
ShareView Details
Assigner-a2826606-91e7-4eb6-899e-8484bd4575d5
CVSS Score-4.4||MEDIUM
EPSS-0.10% / 28.39%
||
7 Day CHG~0.00%
Published-09 Dec, 2025 | 17:02
Updated-26 Feb, 2026 | 16:57
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Improper input validation in NETGEAR Nighthawk routers

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.

Action-Not Available
Vendor-NETGEAR, Inc.
Product-rax45v2_firmwarerax35v2_firmwarerax42v2rax50v2rax45rax43v2rax45_firmwarerax54sv2_firmwarerax50rax49sms90rax50_firmwarerax41_firmwareraxe500_firmwarerax35v2rax42rax50v2_firmwarerax49s_firmwarerax41rax45v2rax42v2_firmwaremr90_firmwarers700ms90_firmwarers700_firmwareraxe500rax41v2_firmwarerax43_firmwarerax41v2rax42_firmwarerax43v2_firmwarerax43mr90rax54sv2raxe450_firmwareraxe450RS700RAX35v2RAX50RAX41v2RAX41RAX49SRAX42v2RAX54Sv2RAX50v2RAXE500RAXE450RAX43v2RAX42RAX43MR90RAX45MS90
CWE ID-CWE-20
Improper Input Validation