CVE-2009-2256: Improper Input Validation

The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to cause a denial of service web outage via an HTTP POST request to cgi-bin/firmwarecfg...

CVE-2005-1680: Undefined Security Weakness

D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication 1 if their IP address already exists in /var/tmp/fwip or 2 if their request is the first, which causes /var/tmp/fwip to be created and contain their IP addre...