PT-2025-46371 · NetGear · Netgear Raxe300+1

Rqu4 · Published 2025-11-11 · Updated 2026-03-27 · CVE-2025-12943

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) versions prior to 1.0.14.108 NETGEAR RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) versions prior to 1.0.9.82

Description A flaw exists in the firmware update logic due to improper certificate validation. This allows attackers who can intercept and modify network traffic intended for the device to execute arbitrary commands.

Recommendations NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) versions prior to 1.0.14.108 should be updated to firmware version 1.0.14.108 or later. NETGEAR RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) versions prior to 1.0.9.82 should be updated to firmware version 1.0.9.82 or later.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2025-15936

CVE-2025-12943

Affected Products

Netgear Rax30

Netgear Raxe300

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-12943 · Security Note
• https://bdu.fstec.ru/vul/2025-15936 · Security Note
• https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025 · Vendor Advisory
• https://netgear.com/support/product/rax30 · Patch
• https://osv.dev/vulnerability/CVE-2025-12943 · Vendor Advisory
• https://netgear.com/support/product/raxe300 · Patch
• https://twitter.com/JakeSwiz80263/status/2036856756559638696 · Twitter Post
• https://twitter.com/CVEnew/status/1988452644365717566 · Twitter Post
• https://t.me/cveNotify/145122 · Telegram Post
• https://t.me/cveNotify/142443 · Telegram Post
• https://twitter.com/JakeSwiz80263/status/2037590503911252107 · Twitter Post
• https://twitter.com/JakeSwiz80263/status/2036941271525200248 · Twitter Post