CVE-2025-4135 | Netgear WG302v2 up to 5.2.9 ui_get_input_value host command injection

A vulnerability was found in Netgear WG302v2 up to 5.2.9 and classified as critical. Affected by this issue is the function ui_get_input_value. The manipulation of the argument host leads to command injection.

This vulnerability is handled as CVE-2025-4135. The attack may be launched remotely. There is no exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.