CVE-2025-12943

Name: CVE-2025-12943
Creator: NVD / NIST
Published: 2025-11-11T17:15:39.41+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.2/10EPSS 0.14%

Last modified Jun 17, 2026

CVE-2025-12943 is a medium-severity vulnerability rated 5.2/10 on the CVSS scale. Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device. Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest. Fixed in: RAX30 firmware 1.0.14.108 or later. RAXE300 firmware 1.0.9.82 or later. EPSS estimates a 0.14% chance of exploitation in the next 30 days.

Description

Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device. Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest. Fixed in: RAX30 firmware 1.0.14.108 or later. RAXE300 firmware 1.0.9.82 or later

Metrics

CVSS 3.1

7.5/10

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 4.0

5.2/10

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber

EPSS Probability

0.14%

3.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-295

Affected Software

Vendor	Product	Versions
Netgear	Rax30 Firmware	< 1.0.14.108
Netgear	Raxe300 Firmware	< 1.0.9.82

References

https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025Vendor Advisory
https://www.netgear.com/support/product/rax30Product
https://www.netgear.com/support/product/raxe300Product

Timeline

Published: Nov 11, 2025
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2025-12943?

How severe is CVE-2025-12943?

CVE-2025-12943 has a CVSS score of 5.2/10 (MEDIUM severity). The EPSS model estimates a 0.14% probability of exploitation in the next 30 days.

How do I fix CVE-2025-12943?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-12943?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST