High severity · published Nov 11, 2025
CVE-2025-12943
Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300
7.5
CVSS
0.2%
EPSS
No
On KEV
Description
Improper certificate
validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream
AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band
WiFi 6E Router) allows attackers with the ability to intercept and
tamper traffic destined to the device to execute arbitrary commands on the
device.
Devices
with automatic updates enabled may already have this patch applied. If not,
please check the firmware version and update to the
latest.
Fixed in:
RAX30 firmware
1.0.14.108 or later.
RAXE300 firmware
1.0.9.82 or later
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
RAX30 · NETGEAR
before 1.0.10.95 · source: vendor
RA
RAXE300 · NETGEAR
before 1.0.9.82 · source: vendor
RF
Rax30 Firmware · Netgear
before 1.0.14.108 · source: NVD
RF
Raxe300 Firmware · Netgear
before 1.0.9.82 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-12943
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-12943
Vendor Advisory
https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025
Product
https://www.netgear.com/support/product/rax30
Product
https://www.netgear.com/support/product/raxe300
More from RAX30
8.8
CVE-2026-11732
Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models
8.8
CVE-2026-11731
Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
8.8
CVE-2026-9211
Certain NETGEAR routers allow unauthenticated users to gain control of the router
8.8
CVE-2023-51635
NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-40480
NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability