CVE-2025-12943
Severity CVSS v4.0:
MEDIUM
Type:
CWE-295
Improper Certificate Validation
Publication date:
11/11/2025
Last modified:
12/11/2025
Description
Improper certificate<br />
validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream<br />
AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band<br />
WiFi 6E Router) allows attackers with the ability to intercept and<br />
tamper traffic destined to the device to execute arbitrary commands on the<br />
device.<br />
<br />
Devices<br />
with automatic updates enabled may already have this patch applied. If not,<br />
please check the firmware version and update to the<br />
latest.<br />
<br />
<br />
<br />
Fixed in:<br />
<br />
<br />
<br />
RAX30 firmware<br />
1.0.14.108 or later.<br />
<br />
<br />
<br />
RAXE300 firmware<br />
1.0.9.82 or later