Command Injection Vulnerability in Netgear JWNR2000v2 Router

CVE-2025-4122

What is CVE-2025-4122?

A security flaw exists in the Netgear JWNR2000v2 router, specifically within the function sub_435E04. This vulnerability allows an attacker to execute arbitrary commands on the device by manipulating the host argument. The exploitation can occur remotely, posing a significant risk to users if not addressed promptly. Users are encouraged to remain vigilant and apply necessary protections to their networking devices.

References