← Database

CVE-2025-44650

HIGH CVSS: 7.5 Published: 2025-07-21 Modified: 2026-06-17

Description

In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file. This can cause DoS attacks when unlimited users are connected.

Affected Platforms

Netgear Eax80Netgear Eax80 FirmwareNetgear R7000 FirmwareNetgear R7000

Weakness Type

CWE-400

References