Remote Denial of Service Vulnerability in Netgear SSL312 Device
CVE-2009-0680

Currently unrated

Key Information:

Vendor
Netgear
Status
Ssl312
Vendor
CVE Published:
22 February 2009

Summary

The Netgear SSL312 router contains a vulnerability in its web interface that allows remote attackers to exploit directory traversal sequences. By sending a specially crafted query string to the cgi-bin/welcome/VPN_only endpoint, an attacker can lead to a denial of service condition, causing the device to crash. This vulnerability represents a significant risk as it can lead to extended downtime and potential disruption of network services.

References

http://archives.neohapsis.com/archives/fulldisclosure/200...
mailing-listx_refsource_FULLDISC
http://www.helith.net/txt/netgear_ssl312_remote_dos.txt
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/48605
vdb-entryx_refsource_XF

EPSS Score

18% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.