CVE-2025-45493

Netgear EX8000 V1.0.0.126 is vulnerable to command injection via the iface parameter in the action_bandwidth function. An attacker can supply a crafted parameter value that results in execution of arbitrary system commands.

Exploitation could allow an attacker to take control of the network device and execute commands in the router's operating system context. This poses a serious threat to the confidentiality and integrity of the organization's network.

Update the Netgear EX8000 firmware to the latest version provided by the vendor. Until patched, restrict administrative access to the device interface to trusted networks only.