VulnerabilityAnalyzed

CVE-2025-12941

Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router.

MEDIUM 5.0EPSS 0.20%

Does this matter?

Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.

Description

Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router.

CVSS 4.0: 5.0 MEDIUMCVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.20% probability · 9th percentile
CISA KEV: Not listed
Weakness: CWE-306
Affected: netgear/c6230 firmware · netgear/c6220 firmware
Source: a2826606-91e7-4eb6-899e-8484bd4575d5

References

https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-AdvisoryVendor Advisory
https://www.netgear.com/support/product/c6220/Product
https://www.netgear.com/support/product/c6230/Product

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.