PT-2025-30289 · NetGear · Netgear Rax80+1

Published 2025-07-21 · Updated 2025-07-21 · CVE-2025-44650

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Netgear R7000 version 1.3.1.64 10.1.36 Netgear EAX80 version 1.0.1.70 1.0.2

Description The USERLIMIT GLOBAL option is set to 0 in the bftpd.conf configuration file, potentially leading to Denial-of-Service (DoS) attacks when an unlimited number of users connect.

Recommendations For Netgear R7000 version 1.3.1.64 10.1.36, modify the bftpd.conf configuration file to set the USERLIMIT GLOBAL option to a non-zero value. For Netgear EAX80 version 1.0.1.70 1.0.2, modify the bftpd.conf configuration file to set the USERLIMIT GLOBAL option to a non-zero value.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-12674

CVE-2025-44650

Affected Products

Netgear Rax80

Netgear R7000

References · 9

• https://netgear.com/about/security · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12674 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-44650 · Security Note
• https://osv.dev/vulnerability/CVE-2025-44650 · Vendor Advisory
• https://gist.github.com/TPCchecker/d13d15dfa8965ba88a9437718f77f67d · Note
• https://notion.so/CVE-2025-44650-24754a1113e780dca89dca218b90b1d9 · Note
• https://twitter.com/CVEnew/status/1947322220612857926 · Twitter Post
• https://vuldb.com/?id.317125 · Note
• https://t.me/cvenotify/129705 · Telegram Post