Buffer Overflow Vulnerability in Netgear EX6200 Router

CVE-2025-4146

What is CVE-2025-4146?

A buffer overflow vulnerability exists in the Netgear EX6200 router version 1.0.3.94, specifically within the function sub_41940. An attacker can exploit this vulnerability by manipulating the argument 'host', leading to the potential execution of arbitrary code. This vulnerability allows a remote attacker to execute this exploit without physical access to the device. Despite the critical nature of this issue, the vendor has not responded to initial reports of the vulnerability.

References