CVE-2025-12943: Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300

Published Nov 11, 2025
·
Updated

Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device.

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest.

Fixed in:

RAX30 firmware 1.0.14.108 or later.

RAXE300 firmware 1.0.9.82 or later

Affected Software

6 affected components
Netgear RAX30<1.0.14.108
Netgear RAXE300<1.0.9.82
All of the following
Netgear RAX30 firmware<1.0.14.108
Netgear RAX30
All of the following
Netgear RAXE300 firmware<1.0.9.82
Netgear RAXE300

Remediation

Information

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest. Fixed in: RAX30 firmware 1.0.14.108 or later. RAXE300 firmware 1.0.9.82 or later

Event History

Nov 11, 2025
CVE Published
via MITRE·04:17 PM
Data Sourced
via MITRE·04:17 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-12943?

CVE-2025-12943 is classified as a high severity vulnerability due to improper certificate validation in firmware update logic.

2

How do I fix CVE-2025-12943?

To fix CVE-2025-12943, update your NETGEAR RAX30 or RAXE300 router to the latest firmware version available.

3

Which devices are affected by CVE-2025-12943?

The affected devices include the NETGEAR RAX30 and NETGEAR RAXE300 routers.

4

What are the potential consequences of CVE-2025-12943?

Exploitation of CVE-2025-12943 could allow attackers to intercept and tamper with traffic destined for the device.

5

When was CVE-2025-12943 disclosed?

CVE-2025-12943 was disclosed in November 2025.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203