What is the CVSS score of CVE-2025-5934?

CVE-2025-5934 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Ex3700 Firmware are affected by CVE-2025-5934?

A critical remote code execution vulnerability (CVE-2025-5934) affects Netgear EX3700 wireless extenders running firmware versions up to 1.0.0.88.

Is there a public PoC exploit available for CVE-2025-5934?

Yes, a public proof-of-concept exploit is available for CVE-2025-5934. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2025-5934?

Within 24 hours: Inventory all Netgear EX3700 devices in production and isolate any units running firmware 1.0.0.88 or earlier from critical network segments. Within 7 days: Implement network segmentation to restrict EX3700 device communication and monitor for exploitation attempts. Initiate replacement planning with procurement. Within 30 days: Complete migration to supported, patched Wi-Fi extender models or apply firmware version 1.0.0.98 if available through alternative channels, and decommission any remaining vulnerable devices.

Ex3700 Firmware CVE-2025-5934

EUVD-2025-17624 HIGH

Buffer Overflow (CWE-119)

2025-06-10 cna@vuldb.com

Buffer Overflow Netgear Ex3700 Firmware RCE

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 19:49 euvd

EUVD-2025-17624

Analysis Generated

Mar 14, 2026 - 19:49 vuln.today

PoC Detected

Jun 20, 2025 - 13:11 vuln.today

Public exploit code

CVE Published

Jun 10, 2025 - 04:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was found in Netgear EX3700 up to 1.0.0.88. It has been classified as critical. Affected is the function sub_41619C of the file /mtd. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.0.98 is able to address this issue. It is recommended to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

A critical stack-based buffer overflow vulnerability (CVE-2025-5934) exists in Netgear EX3700 wireless extenders up to version 1.0.0.88, affecting the sub_41619C function in the /mtd file. An authenticated attacker can remotely exploit this vulnerability to achieve complete system compromise including confidentiality, integrity, and availability breaches. Public exploit code is available, and while the affected product line is no longer supported by Netgear, immediate patching to version 1.0.0.98 is critical for active deployments.

Technical ContextAI

The vulnerability is a stack-based buffer overflow (CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer) in the Netgear EX3700 firmware's /mtd partition handling, specifically in the sub_41619C function. The EX3700 is a WiFi range extender running proprietary Netgear firmware. Stack-based overflows allow attackers to overwrite return addresses and stack variables, enabling arbitrary code execution. The /mtd designation suggests this affects the MTD (Memory Technology Device) layer or firmware region, likely involved in device configuration or upgrade mechanisms. The CWE-119 classification indicates unsafe buffer operations without proper bounds checking on stack-allocated buffers.

RemediationAI

Immediate remediation: Upgrade Netgear EX3700 firmware to version 1.0.0.98 or later. Steps: (1) Access extender management interface (typically 192.168.0.1 or mywifi.net); (2) Navigate to Administration/Firmware Update; (3) Download firmware 1.0.0.98+ from Netgear support site (https://www.netgear.com/support/); (4) Apply update and verify version post-restart. For organizations unable to upgrade: isolate affected devices on separate VLANs, restrict administrative access via firewall rules, and consider replacement with supported hardware. No known workarounds exist for stack-based overflow vulnerabilities—patching is mandatory. Given end-of-life status, verify firmware availability through Netgear legacy support channels.