Get real-time updates on Telegram
CVE-2025-12946: rs700 firmware before 1.0.9.6 (exclusive); +34 more affected products
CVE-2025-12946. CVSS 3.1 base score 7.5 (HIGH, NVD). EPSS 0.00293 (percentile 0.19864), scored 2026-10-05.
Affected technology
rs700 firmware · before 1.0.9.6 (exclusive)
netgear
rax54sv2 firmware · before 1.1.6.36 (exclusive)
netgear
rax45v2 firmware · before 1.1.6.36 (exclusive)
netgear
rax41v2 firmware · before 1.1.6.36 (exclusive)
netgear
rax50 firmware · before 1.2.14.114 (exclusive)
netgear
raxe500 firmware · before 1.2.14.114 (exclusive)
netgear
rax41 firmware · before 1.0.17.142 (exclusive)
netgear
rax43 firmware · before 1.0.17.142 (exclusive)
netgear
rax35v2 firmware · before 1.0.17.142 (exclusive)
netgear
raxe450 firmware · before 1.0.17.142 (exclusive)
netgear
rax43v2 firmware · before 1.1.6.36 (exclusive)
netgear
rax42 firmware · before 1.0.17.142 (exclusive)
netgear
rax45 firmware · before 1.0.17.142 (exclusive)
netgear
rax50v2 firmware · before 1.1.6.36 (exclusive)
netgear
mr90 firmware · before 1.0.2.46 (exclusive)
netgear
ms90 firmware · before 1.0.2.46 (exclusive)
netgear
rax42v2 firmware · before 1.1.6.36 (exclusive)
netgear
rax49s firmware · before 1.1.6.36 (exclusive)
netgear
RS700 · 0 through 1.0.7.82
NETGEAR
RAX54Sv2 · 0 to before V1.1.6.36
NETGEAR
RAX41v2 · 0 to before V1.1.6.36
NETGEAR
RAX50 · 0 to before V1.2.14.114
NETGEAR
RAXE500 · 0 to before V1.2.14.114
NETGEAR
RAX41 · 0 to before V1.0.17.142
NETGEAR
RAX43 · 0 to before V1.0.17.142
NETGEAR
RAX35v2 · 0 to before V1.0.17.142
NETGEAR
RAXE450 · 0 to before V1.2.14.114
NETGEAR
RAX43v2 · 0 to before V1.1.6.36
NETGEAR
RAX42 · 0 to before V1.0.17.142
NETGEAR
RAX45 · 0 to before V1.0.17.142
NETGEAR
RAX50v2 · 0 to before V1.1.6.36
NETGEAR
MR90 · 0 to before V1.0.2.46
NETGEAR
RAX42v2 · 0 to before V1.1.6.36
NETGEAR
RAX49S · 0 to before V1.1.6.36
NETGEAR
MS90 · 0 to before V1.0.2.46
NETGEAR
Component: Speedtest
Attack conditions (Source advisory, CVSS 4.0): Adjacent network · No privileges required · Active user interaction
What an attacker can do
Source advisory’s CVSS 4.0 assessment (base score 4.4/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-20
- CCR priority
- 30.1 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00293 · percentile 0.19958 · 2026-10-06
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-07 11:53:15.413517+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-07 11:49:32.540646+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-12946.html