Vulnerability · Published Nov 11, 2025 · Assigned by NETGEAR

CVE-2025-12940Credentials recorded in logs in NETGEAR WAX610 and WAX610Y

Low 0.5

In plain English

A low-severity sensitive data in logs in WAX610 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 4.0)0.5Low

Exploit odds (30 days)0.3%top 78.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points). An user having access to the syslog server can read the logs containing these credentials. This issue affects WAX610: before 10.8.11.4; WAX610Y: before 10.8.11.4. Devices managed with Insight get automatic updates. If not, please check the firmware version and update to the latest. Fixed in: WAX610 firmware 11.8.0.10 or later. WAX610Y firmware 11.8.0.10 or later.

Affected products (as reported)

Vendor	Product	Versions
NETGEAR	WAX610	0 – before 10.8.11.4
NETGEAR	WAX610Y	0 – before 10.8.11.4

Weakness: CWE-532 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber

References

https://www.netgear.com/support/product/wax610 product, patch
https://www.netgear.com/support/product/wax610y product, patch
https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025 vendor-advisory