High · published December 9, 2025
⚠️ A sneaky flaw in NETGEAR Nighthawk routers lets attackers manipulate DNS responses during speed tests — think of it as a rogue technician replacing your internet speed with a snail's pace! 🐌💨 Imagine you're at a restaurant and the waiter secretly swaps your order for something you didn’t ask for while you wait. This vulnerability allows an attacker to tamper with DNS responses just like that sneaky waiter, but instead of a meal, you're getting unexpected commands executed on your router! If exploited, this vulnerability could allow attackers on the router's WAN side to execute arbitrary commands while you're testing your internet speed. This means that an attacker could potentially gain control over your network settings or perform malicious activities without your knowledge — not exactly the speed boost you were hoping for!
Imagine you're at a restaurant and the waiter secretly swaps your order for something you didn’t ask for while you wait. This vulnerability allows an attacker to tamper with DNS responses just like that sneaky waiter, but instead of a meal, you're getting unexpected commands executed on your router! The vulnerability arises from improper input validation in the speedtest feature, allowing attackers using man-in-the-middle techniques to send manipulated DNS responses when speed tests are conducted.
If exploited, this vulnerability could allow attackers on the router's WAN side to execute arbitrary commands while you're testing your internet speed. This means that an attacker could potentially gain control over your network settings or perform malicious activities without your knowledge — not exactly the speed boost you were hoping for! To protect your network, update your NETGEAR Nighthawk router to the latest firmware version: RS700 should upgrade to 1.0.7.83 or later, RAX54Sv2 to V1.1.6.36 or later, and so on for the affected models. Regularly check for firmware updates and ensure your router configuration is secure! You've got this! Follow the steps above and you'll fortify your router against potential attacks. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| netgear/rs700_firmware | < 1.0.9.6 | 1.0.9.6 |
| netgear/rax54sv2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax45v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax41v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax50_firmware | < 1.2.14.114 | 1.2.14.114 |
| netgear/raxe500_firmware | < 1.2.14.114 | 1.2.14.114 |
| netgear/rax41_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax43_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax35v2_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/raxe450_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax43v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax42_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax45_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax50v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/mr90_firmware | < 1.0.2.46 | 1.0.2.46 |
| netgear/ms90_firmware | < 1.0.2.46 | 1.0.2.46 |
| netgear/rax42v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax49s_firmware | < 1.1.6.36 | 1.1.6.36 |