CVE-2025-12946CWE-20

CVE-2025-12946

High · published December 9, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
20.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky flaw in NETGEAR Nighthawk routers lets attackers manipulate DNS responses during speed tests — think of it as a rogue technician replacing your internet speed with a snail's pace! 🐌💨 Imagine you're at a restaurant and the waiter secretly swaps your order for something you didn’t ask for while you wait. This vulnerability allows an attacker to tamper with DNS responses just like that sneaky waiter, but instead of a meal, you're getting unexpected commands executed on your router! If exploited, this vulnerability could allow attackers on the router's WAN side to execute arbitrary commands while you're testing your internet speed. This means that an attacker could potentially gain control over your network settings or perform malicious activities without your knowledge — not exactly the speed boost you were hoping for!

Put simply

Imagine you're at a restaurant and the waiter secretly swaps your order for something you didn’t ask for while you wait. This vulnerability allows an attacker to tamper with DNS responses just like that sneaky waiter, but instead of a meal, you're getting unexpected commands executed on your router! The vulnerability arises from improper input validation in the speedtest feature, allowing attackers using man-in-the-middle techniques to send manipulated DNS responses when speed tests are conducted.

What to do

If exploited, this vulnerability could allow attackers on the router's WAN side to execute arbitrary commands while you're testing your internet speed. This means that an attacker could potentially gain control over your network settings or perform malicious activities without your knowledge — not exactly the speed boost you were hoping for! To protect your network, update your NETGEAR Nighthawk router to the latest firmware version: RS700 should upgrade to 1.0.7.83 or later, RAX54Sv2 to V1.1.6.36 or later, and so on for the affected models. Regularly check for firmware updates and ensure your router configuration is secure! You've got this! Follow the steps above and you'll fortify your router against potential attacks. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00293 · 20.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-12-09T22:15Z
Affected products (18)
ProductVersionsFixed in
netgear/rs700_firmware< 1.0.9.61.0.9.6
netgear/rax54sv2_firmware< 1.1.6.361.1.6.36
netgear/rax45v2_firmware< 1.1.6.361.1.6.36
netgear/rax41v2_firmware< 1.1.6.361.1.6.36
netgear/rax50_firmware< 1.2.14.1141.2.14.114
netgear/raxe500_firmware< 1.2.14.1141.2.14.114
netgear/rax41_firmware< 1.0.17.1421.0.17.142
netgear/rax43_firmware< 1.0.17.1421.0.17.142
netgear/rax35v2_firmware< 1.0.17.1421.0.17.142
netgear/raxe450_firmware< 1.0.17.1421.0.17.142
netgear/rax43v2_firmware< 1.1.6.361.1.6.36
netgear/rax42_firmware< 1.0.17.1421.0.17.142
netgear/rax45_firmware< 1.0.17.1421.0.17.142
netgear/rax50v2_firmware< 1.1.6.361.1.6.36
netgear/mr90_firmware< 1.0.2.461.0.2.46
netgear/ms90_firmware< 1.0.2.461.0.2.46
netgear/rax42v2_firmware< 1.1.6.361.1.6.36
netgear/rax49s_firmware< 1.1.6.361.1.6.36
References (18)
https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/RAX50 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/mr90 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/ms90 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax35v2 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax41 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax41v2 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax42 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax42v2 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax43 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax43v2 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax45 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax49s · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax50v2 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax54sv2 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/raxe450 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/raxe500 · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rs700 · a2826606-91e7-4eb6-899e-8484bd4575d5
EPSS history
Timeline
  • 09 DEC 17:02Z
    Improper input validation in NETGEAR Nighthawk routers
    cvelistv5