Lucene search
MitreCVE-2009-2258HistoryJun 30, 2009 - 10:30 a.m.
CVE-2009-2258
2009-06-3010:30:21
CWE-22
mitre
web.nvd.nist.gov
22
netgear
dg632
firmware
vulnerability
directory traversal
remote attack
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0.004
Percentile
73.9%
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a … (dot dot) in the nextpage parameter.
Affected configurations
Node
netgeardg632_firmwareMatch3.4.0_ap
netgeardg632Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| netgear | dg632_firmware | 3.4.0_ap | cpe:2.3:h:netgear:dg632_firmware:3.4.0_ap:*:*:*:*:*:*:* |
| netgear | dg632 | - | cpe:2.3:h:netgear:dg632:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-2258
2009-06-30 10:00:00
nvd
nvd
CVE-2009-2258
2009-06-30 10:30:21
prion
prion
Directory traversal
2009-06-30 10:30:00
exploitdb
exploitdb
Netgear DG632 Router - Authentication Bypass
2009-06-15 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0.004
Percentile
73.9%
Related for CVE-2009-2258