CVE-2025-12941

MEDIUM EPSS 6.9%
Published Dec 9, 20256mo ago · Modified Jun 17, 20262w ago
5.0 CVSS 4.0
Medium
Find Similar
Published Dec 9, 2025 6mo ago
Last Modified Jun 17, 2026 2w ago

Description

Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router.

CVSS Details

Base Score
5.0
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:L/U:Amber
Attack Vector Adjacent
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
6.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-306 Missing Authentication for Critical Function Authentication

Affected Products 4

VendorProductVersionRange
netgearc6230_firmware*any
netgearc6230*any
netgearc6220_firmware*any
netgearc6220*any

References 3

  • kb.netgear.com https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisory
    Vendor Advisory
  • netgear.com https://www.netgear.com/support/product/c6220/
    Product
  • netgear.com https://www.netgear.com/support/product/c6230/
    Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.