CVE-2025-12943: Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6…
CVE-2025-12943 · Severity: high · CVSS 7.5 · Published 2025-11-11
Improper certificate
validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream
AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band
WiFi 6E Router) allows attackers with the ability to intercept and
tamper traffic destined to the device to execute arbitrary commands on the
device.
Devices
with automatic updates enabled may already have this patch applied. If not,
please check the firmware version and update to the
latest.
No. Junglewise Threat Intelligence has no report of CVE-2025-12943 being exploited in the wild.
How severe is CVE-2025-12943?
High severity, with a CVSS score of 7.5, published 11 November 2025.
Which products and versions are affected?
NETGEAR RAX30, NETGEAR Rax30 Firmware, NETGEAR RAXE300, NETGEAR Raxe300 Firmware. The advisory does not name versions.
Is there a fix for CVE-2025-12943?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2025-12943?
Check whether you run NETGEAR RAX30, NETGEAR Rax30 Firmware, NETGEAR RAXE300 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.