ID
VAR-202512-0788
CVE
CVE-2025-12945
TITLE
of netgear R7000P Firmware Input Validation Vulnerability
Trust: 0.8
DESCRIPTION
An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability. This issue affects R7000P: through 1.3.3.154. OS There is a vulnerability that allows command injection. R7000P version of 1.3.3.154 It will affect up to.All information handled by the software may be leaked to the outside. All information handled by the software may be rewritten. Furthermore, the software may stop working completely. Furthermore, attacks that exploit this vulnerability will not affect other software
Trust: 1.62
AFFECTED PRODUCTS
| vendor: | netgear | model: | r7000p | scope: | lte | version: | 1.3.3.154 | Trust: 1.0 |
| vendor: | ネットギア | model: | r7000p | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r7000p | scope: | lte | version: | r7000p firmware 1.3.3.154 and earlier | Trust: 0.8 |
| vendor: | ネットギア | model: | r7000p | scope: | eq | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-20 | Trust: 1.0 |
| problemtype: | NVD-CWE-noinfo | Trust: 1.0 |
| problemtype: | Inappropriate input confirmation (CWE-20) [ others ] | Trust: 0.8 |
| problemtype: | Lack of information (CWE-noinfo) [NVD evaluation ] | Trust: 0.8 |
PATCH
| title: | December 2025 NETGEAR Security Advisory - NETGEAR Support | url: | https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-12945 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2025-024880 | Trust: 0.8 |
REFERENCES
| url: | https://www.netgear.com/support/product/r7000p | Trust: 1.8 |
| url: | https://kb.netgear.com/000070416/december-2025-netgear-security-advisory | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-12945 | Trust: 0.8 |
SOURCES
| db: | JVNDB | id: | JVNDB-2025-024880 |
| db: | NVD | id: | CVE-2025-12945 |
LAST UPDATE DATE
2026-08-27T23:47:18.558000+00:00
SOURCES UPDATE DATE
| db: | JVNDB | id: | JVNDB-2025-024880 | date: | 2026-01-19T10:35:00 |
| db: | NVD | id: | CVE-2025-12945 | date: | 2026-08-26T17:16:46 |
SOURCES RELEASE DATE
| db: | JVNDB | id: | JVNDB-2025-024880 | date: | 2026-01-19T00:00:00 |
| db: | NVD | id: | CVE-2025-12945 | date: | 2025-12-09T17:15:48.647 |