Improper input validation in NETGEAR R7000p
CVE-2025-12945
An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability. This issue affects R7000P: through 1.3.3.154.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 2.4 (Low). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N.
EPSS exploit prediction
EPSS: 0.011 (65.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 65th percentile — 65.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.011 · change: -0.001
Affected products
- NETGEAR R7000p — versions 0
- NETGEAR R7000p Firmware
Weakness classification (CWE)
References
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-12945?
- CVE-2025-12945 is a low-severity vulnerability in NETGEAR R7000p, classified under Improper Input Validation. CVSS score: 2.4/10. Published 2025-12-09.
- How severe is CVE-2025-12945?
- Low severity. CVSS v3 base score is 2.4 out of 10.