High severity · published Dec 9, 2025
CVE-2025-12945
An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to…
7.2
CVSS
1.2%
EPSS
No
On KEV
Description
An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability.
This issue affects R7000P: through 1.3.3.154.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
R7000p Firmware · Netgear
through 1.3.3.154 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-12945
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-12945
Vendor Advisory
https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory
Patch
https://www.netgear.com/support/product/r7000p
More from R7000p Firmware
9.8
CVE-2023-36187
Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd
9.8
CVE-2022-48322
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability
9.8
CVE-2022-48196
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
9.8
CVE-2022-44184
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec
9.8
CVE-2022-44200
Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec