CVE-2025-4120

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Apr 30, 2025
Updated: May 13, 2025
CWE ID 119
CWE ID 120

Summary

CVE-2025-4120 is a critical vulnerability affecting the Netgear JWNR2000v2 1.0.0.11 firmware. The issue lies within the function sub_4238E8, where a buffer overflow occurs due to manipulation of the 'host' argument. This vulnerability allows remote attacks, posing a significant threat. Despite being informed early, the vendor has yet to address this disclosure.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share