Lucene search
HistoryFeb 22, 2009 - 10:30 p.m.
CVE-2009-0680
netgear
ssl312
cve-2009-0680
denial of service
web interface
vulnerability
6.8 Medium
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.022 Low
EPSS
Percentile
89.4%
cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service (device crash) via a crafted query string, as demonstrated using directory traversal sequences.
Affected configurations
Node
netgearssl312Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| netgear:ssl312 | netgear ssl312 | eq | - |
Related
cvelist
cvelist
CVE-2009-0680
2009-02-22 22:00:00
prion
prion
Directory traversal
2009-02-22 22:30:00
nvd
nvd
CVE-2009-0680
2009-02-22 22:30:01
6.8 Medium
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.022 Low
EPSS
Percentile
89.4%
Related for CVE-2009-0680