CVE-2025-12944CWE-20

CVE-2025-12944

High · published November 11, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

⚠️ Direct access could spell trouble! An improper input validation flaw in the NETGEAR DGN2200v4 modem allows attackers to potentially execute code on your device. 🔥 Think of it like a restaurant where the chef accepts any ingredient brought in without checking where it came from — a recipe for disaster if the wrong ingredients get tossed into the mix! If attackers gain access to this flaw, they could execute any code they wish on the router, leading to unauthorized control over the network. That could mean snooping on your private data, rerouting connections, or even turning your home into a hotspot for cybercriminals. Yikes!

Put simply

Think of it like a restaurant where the chef accepts any ingredient brought in without checking where it came from — a recipe for disaster if the wrong ingredients get tossed into the mix! This vulnerability arises from improper input validation, allowing an attacker with direct network access to send malicious input that the device fails to properly sanitize, leading to potential code execution.

What to do

If attackers gain access to this flaw, they could execute any code they wish on the router, leading to unauthorized control over the network. That could mean snooping on your private data, rerouting connections, or even turning your home into a hotspot for cybercriminals. Yikes! To protect yourself, check your router’s firmware version and update to at least version 1.0.0.132. Regularly updating your devices is crucial in maintaining their security. Don't forget to consider changing default settings and strengthening your network! You've got this! Follow these steps and your network will be secure in no time. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00268 · 17.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-11-11T22:15Z
Affected products (1)
ProductVersionsFixed in
netgear/dgn2200_firmware< 1.0.0.1321.0.0.132
References (2)
EPSS history
Timeline
  • 11 NOV 16:17Z
    Improper input validation in NETGEAR DGN2200v4
    cvelistv5