CVE-2025-25246 Information

Description

NETGEAR XR1000 before 1.0.0.74 XR1000v2 before 1.1.0.22 and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.

Reference

https://kb.netgear.com/000066558/Security-Advisory-for-Unauthenticated-RCE-on-Some-WiFi-Routers-PSV-2023-0039