CVE-2025-12941
Severity CVSS v4.0:
MEDIUM
Type:
CWE-306
Missing Authentication for Critical Function
Publication date:
09/12/2025
Last modified:
16/01/2026
Description
Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router.
Impact
Base Score 4.0
5.00
Severity 4.0
MEDIUM
Base Score 3.x
5.70
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:netgear:c6230_firmware:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:netgear:c6230:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:c6220_firmware:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:netgear:c6220:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



