CVE-2025-44658: Malicious File Upload
In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions. An attacker may exploit this by uploading malicious scripts disguised with alternate extensions and tricking the web server into executing them as PHP, bypassing security mechanisms based on file extension filtering. This may lead to remote code execution (RCE), information disclosure, or full system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-44658?
The severity of CVE-2025-44658 is classified as high due to the potential for remote code execution via uploaded malicious scripts.
How do I fix CVE-2025-44658?
To fix CVE-2025-44658, ensure that PHP-FPM configurations are set to restrict execution to only .php file extensions.
What impact does CVE-2025-44658 have on Netgear RAX30 users?
The impact of CVE-2025-44658 on Netgear RAX30 users includes the risk of unauthorized remote code execution leading to full system compromise.
What is the cause of CVE-2025-44658?
CVE-2025-44658 is caused by a misconfiguration in PHP-FPM that fails to limit executable scripts to files with a .php extension.
Is CVE-2025-44658 being actively exploited?
There is currently no public report of active exploitation of CVE-2025-44658, but the vulnerability poses a significant risk if not addressed.