How to fix or mitigate CVE-2025-12940?

During next maintenance window: Apply vendor patches when convenient. Verify log exposure controls are in place.

Wax610Y Firmware CVE-2025-12940

Q: What is the CVSS score of CVE-2025-12940?

CVE-2025-12940 has a CVSS 4.0 base score of 0.5 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber. EPSS exploitation probability: 0.0%.

Q: Which versions of Wax610Y Firmware are affected by CVE-2025-12940?

CVE-2025-12940 is a low-severity vulnerability in Login credentials are inadvertently recorded in logs if a Syslog Server involving log exposure (CVSS 0.5).

LOW

Insertion of Sensitive Information into Log File (CWE-532)

2025-11-11 a2826606-91e7-4eb6-899e-8484bd4575d5

Information Disclosure Netgear Wax610Y Firmware Wax610 Firmware

0.5

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:21 vuln.today

CVE Published

Nov 11, 2025 - 17:15 nvd

LOW 0.5

DescriptionNVD

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points). An user having access to the syslog server can read the logs containing these credentials.

This issue affects WAX610: before 10.8.11.4; WAX610Y: before 10.8.11.4.

Devices managed with Insight get automatic updates. If not, please check the firmware version and update to the latest.

Fixed in:

WAX610 firmware 11.8.0.10 or later.

WAX610Y firmware 11.8.0.10 or later.

AnalysisAI

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points). Rated low severity (CVSS 0.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-532. Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points). An user having access to the syslog server can read the logs containing these credentials.8.11.4; WAX610Y: before 10.8.11.4. Devices managed with Insight get automatic updates. If not, please check the firmware version and update to the latest. Fixed in: WAX610 firmware 11.8.0.10 or later. WAX610Y firmware 11.8.0.10 or later. Affected products include: Netgear Wax610Y Firmware, Netgear Wax610 Firmware. Version information: before 10.8.11.4.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2025-12940 vulnerability details – vuln.today

Back