C6220 Firmware
Monthly
Authenticated users on the local WiFi network can trigger a reboot of NETGEAR C6220 and C6230 DOCSIS 3.0 cable modem/WiFi router units, producing a recurring denial-of-service condition against the device itself. The flaw is a missing-authentication-for-critical-function weakness (CWE-306) on the reboot routine, meaning the router does not properly verify that the caller is authorized to perform that administrative action; exploitation is confined to attackers already on the adjacent WiFi network with valid low-privilege credentials (CVSS 3.1 AV:A/PR:L, availability-only impact). No confirmed active exploitation has been reported (not in CISA KEV), though the supplied CVSS 4.0 vector carries an E:P Exploit Maturity rating indicating proof-of-concept-level exploit code, and EPSS is very low at 0.20% (8th percentile), so this is a low-to-moderate priority availability issue rather than an urgent one.
Authenticated users on the local WiFi network can trigger a reboot of NETGEAR C6220 and C6230 DOCSIS 3.0 cable modem/WiFi router units, producing a recurring denial-of-service condition against the device itself. The flaw is a missing-authentication-for-critical-function weakness (CWE-306) on the reboot routine, meaning the router does not properly verify that the caller is authorized to perform that administrative action; exploitation is confined to attackers already on the adjacent WiFi network with valid low-privilege credentials (CVSS 3.1 AV:A/PR:L, availability-only impact). No confirmed active exploitation has been reported (not in CISA KEV), though the supplied CVSS 4.0 vector carries an E:P Exploit Maturity rating indicating proof-of-concept-level exploit code, and EPSS is very low at 0.20% (8th percentile), so this is a low-to-moderate priority availability issue rather than an urgent one.