Router

NETGEAR WG302

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1 · Atheros AR5212A (mini-PCI) Wi-Fi
Retired support documentedProcessor: Intel IXP422BB · Memory: 32 MBOpen device guide
v2 · Intel IXP422BB
Retired support documentedMemory: 16 MBOpen device guide
v1; v1 · Atheros AR2112 / Atheros AR5212A Wi-Fi
Open hardware record
v2; v2 · Atheros AR2414A Wi-Fi
Open hardware record

v1 · Atheros AR5212A (mini-PCI) Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.

v2 · Intel IXP422BB

Device support in source
Retired; check the documented hardware and older release resources.
Sources

Features & details

Check the project and hardware shown for each feature.

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVSS 5.3 (v4.0)

WG302v2

Netgear WG302v2 ui_get_input_value command injection

CVE-2025-4135

Affected firmware
5.2.0 5.2.1 5.2.2 5.2.3 5.2.4 5.2.5 5.2.6 5.2.7 5.2.8 5.2.9
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources

A vulnerability was found in Netgear WG302v2 up to 5.2.9 and classified as critical. Affected by this issue is the function ui_get_input_value. The manipulation of the argument host leads to command injection. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-306626 | Netgear WG302v2 ui_get_input_value command injection — WG302v2 (vuldb.com) ↗VDB-306626 | CTI Indicators (IOB, IOC, TTP, IOA) — WG302v2 (vuldb.com) ↗Submit #560779 | Netgear WG302v2 5.2.9 Command Injection — WG302v2 (vuldb.com) ↗
Check more security advisories for this device · CVE.org