CVE-2025-12944 Improper input validation in NETGEAR DGN2200v4

What is CVE-2025-12944?

CVE-2025-12944 is a medium-severity vulnerability in NETGEAR DGN2200v4, published on 11 Nov 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially execute code on the device.

Please check the firmware version and update to the latest.

Fixed in:

 DGN2200v4 firmware 1.0.0.132 or later

Weakness: CWE-20

Which versions are affected by CVE-2025-12944?

It affects 1 product.

Products include Netgear Dgn2200 Firmware.

How do I fix CVE-2025-12944?

No fix has been published for CVE-2025-12944 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-12944 being exploited?

There is no known exploitation of CVE-2025-12944 in the wild and no public exploit code.

Other vulnerabilities in NETGEAR DGN2200v4

• CVE-2017-6077 NETGEAR DGN2200 Remote Code Execution Exploited Critical 9.8
• CVE-2019-17373 Auth bypass in n/a Critical 9.8
• CVE-2016-5649 Netgear DGN2200 and DGND3700 disclose the administrator password Critical 9.8
• CVE-2024-57046 Auth bypass in n/a High 8.8
• CVE-2017-18755 Cross-site request forgery in n/a High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-q26q-g7qp-vmrr.