Login Request a demo
High severity · published Dec 9, 2025
CVE-2025-12946
Improper input validation in NETGEAR Nighthawk routers
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MR
MR90 · NETGEAR
before V1.0.2.46 · source: vendor
MS
MS90 · NETGEAR
before V1.0.2.46 · source: vendor
RA
RAX35v2 · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX41 · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX41v2 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX42 · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX42v2 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX43 · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX43v2 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX45 · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX49S · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX50 · NETGEAR
before V1.2.14.114 · source: vendor
Affected product
MR
MR90
NETGEAR
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-12946
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-12946
Patch
https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory
Patch
https://www.netgear.com/support/product/RAX50
Patch
https://www.netgear.com/support/product/mr90
Patch
https://www.netgear.com/support/product/ms90
Patch
https://www.netgear.com/support/product/rax35v2
Patch
https://www.netgear.com/support/product/rax41
More from MR90
6.4
CVE-2026-11739
Command injection vulnerability in some NETGEAR Nighthawk devices
2.7
CVE-2026-11734
Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.