High severity · published Dec 9, 2025
CVE-2025-12945
Improper input validation in NETGEAR Nighthawk router R7000P
7.2
CVSS
1.2%
EPSS
No
On KEV
Description
An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability.
This issue affects R7000P: through 1.3.3.154.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
R7
R7000P · NETGEAR
through 1.3.3.154 · source: vendor
RF
R7000p Firmware · Netgear
through 1.3.3.154 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-12945
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-12945
Vendor Advisory
https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory
Patch
https://www.netgear.com/support/product/r7000p
More from R7000P
7.5
CVE-2024-12988
Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow
4.5
CVE-2026-9218
Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access
4.5
CVE-2026-0417
Insufficient input validation in certain NETGEAR routers
4.5
CVE-2026-9210
Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router