A stack-based buffer overflow (CWE‑20) was identified in several NETGEAR Nighthawk routers. The flaw allows an authenticated administrator to overwrite memory on the router’s stack, enabling unauthorized modification of router software or configuration. This could compromise the integrity of the device, leading to unintended routing policies, loss of network isolation, or deployment of malicious firmware.

The affected products are NETGEAR Nighthawk routers, including models RAX20, RAX35v2, RAX41, RAX41v2, RAX42, RAX42v2, RAX43, RAX43v2, RAX45, RAX49S, RAX50, RAX50S, RAX50v2, RAX54Sv2, RAX54v2, RAXE450, RAXE500, XR1000, and XR1000v2. Firmware versions susceptible to the vulnerability include V1.0.16.132 and V1.1.4.28, along with earlier builds. Devices marked End‑of‑Support (EoS) such as RAX20, RAX41, RAX42, and RAX45 have ceased receiving security updates, and users are advised to retire or replace them with newer, supported models.

With a CVSS score of 1.9 and no EPSS data, the vulnerability is considered low severity because it requires an authenticated administrator to trigger the stack overflow. Attackers would need local or remote administrative credentials to exploit the flaw, after which they could modify firmware or router functionality. The CISA KEV catalog does not list this CVE, indicating that advanced persistent threat exploitation is not publicly confirmed. Nonetheless, any compromised administrative session poses a risk of unapproved firmware changes, so prompt patching and strong credential protection remain critical.