1. Home
  2. CVE Database
  3. CVE-2025-12942
HIGH · 7.5

CVE-2025-12942

Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform...

Vulnerability Description

Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearR6260 Firmware< 1.1.0.86
NetgearR6260-
NetgearR6850 Firmware< 1.1.0.86
NetgearR6850-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2025-12942?

CVE-2025-12942 is a vulnerability with a CVSS score of 7.5 (HIGH). Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform...

How severe is CVE-2025-12942?

CVE-2025-12942 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-12942?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear R6260 Firmware, Netgear R6260, Netgear R6850 Firmware, Netgear R6850.