High · 8.1 CVE-2025-25246 EUVD-2025-4095GHSA-4qgw-f8fj-66qh

NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.

Published Feb 5, 2025 · Updated Feb 12, 2025 · Assigned by mitre

Description

Vendor	Product	Affected	Fixed
NETGEAR	XR1000	< 1.0.0.74	1.0.0.74
NETGEAR	XR1000v2	< 1.1.0.22	1.1.0.22
NETGEAR	XR500	< 2.3.2.134	2.3.2.134