NETGEAR WG302V2 Firmware vulnerabilities

2 CVEs affecting NETGEAR WG302V2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-4135, published 2025-04-30.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-4135, published 2025-04-30. Medium severity, CVSS 6.3. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability was found in Netgear WG302v2 up to 5.2.9 and classified as critical. Affected by this issue is the function ui_get_input_value. The manipulation of the argument host leads to command…
• CVE-2023-38921, published 2023-08-07. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the firmwareRestore and firmwareServerip…