Rax35V2 Firmware
Monthly
Command execution and information disclosure in the built-in speedtest feature of multiple NETGEAR Nighthawk routers (RAX/RAXE/MR/MS/RS700 families) allows an attacker positioned on the router's WAN side to conduct an active attacker-in-the-middle attack, spoof DNS responses, and have malicious commands executed when the router's speedtest is run. Exploitation is not autonomous: it requires a privileged upstream network position plus the victim actively triggering a speedtest, which is why the assessed severity is only 4.4/MEDIUM despite high confidentiality, integrity, and availability impact on the device. No public exploit code exists and there is no confirmed active exploitation (not in CISA KEV); EPSS is very low at 0.29% (20th percentile), consistent with a targeted rather than opportunistic threat. Vendor-released fixed firmware is available for the affected models.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Command execution and information disclosure in the built-in speedtest feature of multiple NETGEAR Nighthawk routers (RAX/RAXE/MR/MS/RS700 families) allows an attacker positioned on the router's WAN side to conduct an active attacker-in-the-middle attack, spoof DNS responses, and have malicious commands executed when the router's speedtest is run. Exploitation is not autonomous: it requires a privileged upstream network position plus the victim actively triggering a speedtest, which is why the assessed severity is only 4.4/MEDIUM despite high confidentiality, integrity, and availability impact on the device. No public exploit code exists and there is no confirmed active exploitation (not in CISA KEV); EPSS is very low at 0.29% (20th percentile), consistent with a targeted rather than opportunistic threat. Vendor-released fixed firmware is available for the affected models.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.