Back to Database
Status published
High
CVE-2009-0680
cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote...
Vulnerability Description
cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service (device crash) via a crafted query string, as demonstrated using directory traversal sequences.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0680
Credits & Attribution
No credits recorded in the NVD database.
References
- http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0084.html
- http://www.helith.net/txt/netgear_ssl312_remote_dos.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48605
- http://www.securityfocus.com/bid/33675
- https://www.exploit-db.com/exploits/8008
- http://secunia.com/advisories/33896
More from netgear
View All →CVE-2022-48322
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by...
Unknown
0
CVE-2022-48196
Certain NETGEAR devices are affected by a buffer overflow by...
High
7.4
CVE-2022-48176
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before...
Unknown
0
CVE-2022-47052
The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi...
Unknown
0
CVE-2022-46424
An exploitable firmware modification vulnerability was discovered on the Netgear...
Unknown
0
Affected Vendor
netgear
View all reports →Affected Software
ssl312
Vulnerable Versions:
Unknown
Timeline
Official Publish:
February 22nd, 2009
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.