CVE-2025-12945

HIGH

NETGEAR Nighthawk R7000P <1.3.3.154 - Command Injection

Title source: llm

Description

A vulnerability in NETGEAR Nighthawk R7000P routers lets an authenticated admin execute OS command injections due to improper input validation. This issue affects R7000P: through 1.3.3.154.

References (2)

Core 2

Core References

Patch, Product product

https://www.netgear.com/support/product/r7000p

Vendor Advisory vendor-advisory

https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory

Scores

CVSS v3 7.2

EPSS 0.0051

EPSS Percentile 66.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (1)

netgear/r7000p_firmware < 1.3.3.154

Published Dec 09, 2025

Tracked Since Feb 18, 2026