CVE Feed

    Dashboard / CVE / CVE-2025-44650

    CVE-2025-44650

    In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file. This can cause DoS attacks when unlimited users are connected.

    Published:Jul 21, 2025
    Last Modified:Aug 7, 2025
    EPS:Jul 21, 2025
    EPSS Score:0.00126
    CVSS Score:7.5

    Affected Products

    Vendor
    Netgear
    Product
    Eax80
    Vendor
    Netgear
    Product
    Eax80 Firmware
    Vendor
    Netgear
    Product
    R7000
    Vendor
    Netgear
    Product
    R7000 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2021-45610 (CVSS 9.6) — Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 b…
    CVE-2021-45612 (CVSS 9.6) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45617 (CVSS 9.8) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45620 (CVSS 9.6) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45621 (CVSS 9.6) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45622 (CVSS 9.6) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45639 (CVSS 5.2) — Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.…
    CVE-2021-45647 (CVSS 6.5) — Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.6…
    CVE-2021-45665 (CVSS 6.5) — Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.36, EAX80 before 1.0.1.62,…
    CVE-2021-45666 (CVSS 6.5) — Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.64,…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High