PT-2025-50104 · NetGear · Netgear Nighthawk R7000

Smalls · Published 2025-12-09 · Updated 2025-12-14 · CVE-2025-12945

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk R7000P versions through 1.3.3.154

Description A flaw exists in NETGEAR Nighthawk R7000P routers that allows an authenticated administrator to execute OS command injections. This is caused by insufficient input validation. The vulnerability allows for the execution of arbitrary commands on the underlying operating system.

Recommendations Update to a version later than 1.3.3.154.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-12945

Affected Products

Netgear Nighthawk R7000

References · 7

• https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12945 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12945 · Vendor Advisory
• https://netgear.com/support/product/r7000p · Patch
• https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-December-2025 · Note
• https://twitter.com/CVEnew/status/2000248690989248703 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1998469594055336354 · Twitter Post