CVE-2025-12945EPSS p65.5%

CVE-2025-12945CVE-2025-12945

netgear / r7000p_firmware

Description

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability. This issue affects R7000P: through 1.3.3.154.

Scoring

CVSS 2.4 ()
VectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
EPSS1.14% probability of exploitation · percentile 65.5% · 2026-10-05T12:00:23Z
Last modified2026-08-26
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.