CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-25246: NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.
8.1
CVSS
Description
NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.
Classification
CVE ID: CVE-2025-25246
CVSS Base Severity: HIGH
CVSS Base Score: 8.1
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
Vendor: NETGEAR
Product: XR1000
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.85% (scored less or equal to compared to others)
EPSS Date: 2025-03-06 (when was this score calculated)