VULNERABILITY INTELLIGENCE
CVE-2025-4120
CVSS score8.8 HIGH
EPSS probability1.03%
CISA KEVNot currently listed
Published2025-04-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been classified as critical. Affected is the function sub_4238E8. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness classification
- cna@vuldb.com: CWE-119
- nvd@nist.gov: CWE-120
Primary references
- cna@vuldb.com — Broken Link
- cna@vuldb.com — Permissions Required, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Product