CVE-2025-25246CWE-94

NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users

High · published February 5, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00688 · 52.2th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-02-05T00:00Z
EPSS history
Timeline
  • 05 FEB 00:00Z
    NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users
    cvelistv5