{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2025-12945",
        "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "state": "PUBLISHED",
        "assignerShortName": "NETGEAR",
        "dateReserved": "2025-11-10T08:26:25.516Z",
        "datePublished": "2025-12-09T17:01:38.595Z",
        "dateUpdated": "2026-08-26T16:17:50.127Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5",
                "shortName": "NETGEAR",
                "dateUpdated": "2026-08-26T16:17:50.127Z"
            },
            "title": "Improper input validation in NETGEAR Nighthawk router R7000P",
            "datePublic": "2025-12-09T17:00:00.000Z",
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "lang": "en",
                            "cweId": "CWE-20",
                            "description": "CWE-20 Improper Input Validation",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "impacts": [
                {
                    "capecId": "CAPEC-248",
                    "descriptions": [
                        {
                            "lang": "en",
                            "value": "CAPEC-248 Command Injection"
                        }
                    ]
                }
            ],
            "affected": [
                {
                    "vendor": "NETGEAR",
                    "product": "R7000P",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThanOrEqual": "1.3.3.154",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }
            ],
            "cpeApplicability": [
                {
                    "nodes": [
                        {
                            "cpeMatch": [
                                {
                                    "criteria": "cpe:2.3:h:netgear:r7000p:*:*:*:*:*:*:*:*",
                                    "versionEndIncluding": "1.3.3.154",
                                    "versionStartIncluding": "0",
                                    "vulnerable": true
                                }
                            ],
                            "negate": false,
                            "operator": "OR"
                        }
                    ],
                    "operator": "OR"
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "value": "An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability.\n\n\n\n\n\nThis issue affects R7000P: through 1.3.3.154.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<div><div><p>An improper input validation&nbsp;vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make&nbsp;<span>unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability.</span></p></div><div><p>This issue affects R7000P: through 1.3.3.154. </p></div></div><p></p>"
                        }
                    ]
                }
            ],
            "tags": [
                "unsupported-when-assigned"
            ],
            "references": [
                {
                    "url": "https://www.netgear.com/support/product/r7000p",
                    "tags": [
                        "product"
                    ]
                },
                {
                    "url": "https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory",
                    "tags": [
                        "vendor-advisory"
                    ]
                }
            ],
            "metrics": [
                {
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ],
                    "cvssV4_0": {
                        "attackVector": "ADJACENT",
                        "attackComplexity": "LOW",
                        "attackRequirements": "NONE",
                        "privilegesRequired": "HIGH",
                        "userInteraction": "NONE",
                        "vulnConfidentialityImpact": "NONE",
                        "subConfidentialityImpact": "NONE",
                        "vulnIntegrityImpact": "LOW",
                        "subIntegrityImpact": "NONE",
                        "vulnAvailabilityImpact": "NONE",
                        "subAvailabilityImpact": "NONE",
                        "exploitMaturity": "UNREPORTED",
                        "Safety": "NOT_DEFINED",
                        "Automatable": "NO",
                        "Recovery": "AUTOMATIC",
                        "valueDensity": "DIFFUSE",
                        "vulnerabilityResponseEffort": "MODERATE",
                        "providerUrgency": "AMBER",
                        "version": "4.0",
                        "baseSeverity": "LOW",
                        "baseScore": 1.1,
                        "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber"
                    }
                },
                {
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ],
                    "cvssV3_1": {
                        "version": "3.1",
                        "attackVector": "ADJACENT_NETWORK",
                        "attackComplexity": "LOW",
                        "privilegesRequired": "HIGH",
                        "userInteraction": "NONE",
                        "scope": "UNCHANGED",
                        "confidentialityImpact": "NONE",
                        "integrityImpact": "LOW",
                        "availabilityImpact": "NONE",
                        "baseSeverity": "LOW",
                        "baseScore": 2.4,
                        "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N"
                    }
                }
            ],
            "workarounds": [
                {
                    "lang": "en",
                    "value": "NETGEAR strongly recommends not to allow untrusted users to administer your device and protect it with strong password.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "NETGEAR strongly recommends not to allow untrusted users to administer your device and protect it with strong password.&nbsp;"
                        }
                    ]
                }
            ],
            "solutions": [
                {
                    "lang": "en",
                    "value": "NETGEAR\nR7000P has reached End-of-Support phase, and no security updates are planned.\nNETGEAR strongly recommends that you retire this device and upgrade to a\nnewer NETGEAR device for continued security support.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "NETGEAR\nR7000P has reached End-of-Support phase, and no security updates are planned.\nNETGEAR strongly recommends that you retire this device and upgrade to a\nnewer NETGEAR device for continued security support.\n\n\n\n<br>"
                        }
                    ]
                }
            ],
            "credits": [
                {
                    "lang": "en",
                    "value": "SmallS",
                    "type": "finder"
                }
            ],
            "source": {
                "discovery": "UNKNOWN"
            },
            "x_generator": {
                "engine": "Vulnogram 0.5.0"
            }
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2025-12-09T20:22:21.969102Z",
                                "id": "CVE-2025-12945",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "no"
                                    },
                                    {
                                        "Technical Impact": "partial"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2025-12-09T20:44:03.610Z"
                }
            }
        ]
    }
}