CVE-2025-12941CWE-306

CVE-2025-12941

Medium · published December 9, 2025

CVSS v3.1
5.7
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-12-09T22:15Z
Affected products (2)
ProductVersionsFixed in
netgear/c6230_firmwareall versions—
netgear/c6220_firmwareall versions—
References (3)
https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/c6220/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/c6230/ · a2826606-91e7-4eb6-899e-8484bd4575d5
EPSS history
Timeline
  • 09 DEC 17:01Z
    Denial of Service Vulnerability in NETGEAR C6220 and C6230
    cvelistv5