CVE-2025-45493 — Command Injection in Netgear Ex8000 Firmware

CWE-77 — Command Injection3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
3.3%
top 12.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netgear Ex8000 Firmware
Timeline
PublishedDec 23

Description

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.5

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-8x5c-7829-xgw6: Netgear EX8000 V1↗2025-12-23
▶
CVEList
CVE-2025-45493: Netgear EX8000 V1↗2025-12-23
▶
CVE-2025-45493 — Command Injection in Netgear | cvebase