CVE-2009-2256

EPSS 3.71%
Published 30.06.2009 10:30:21
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg.

Affected products Warnungen 0 Metrics 2 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Netgear ≫ Dg632 Version3.4.0_ap

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.71%	0.868

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://securitytracker.com/id?1022403

http://www.exploit-db.com/exploits/8964

http://www.securityfocus.com/archive/1/504341/100/0/threaded

http://www.securityfocus.com/archive/1/504345/100/0/threaded

http://www.tomneaves.co.uk/Netgear_DG632_Remote_DoS.txt

https://nvd.nist.gov/vuln/detail/CVE-2009-2256

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-2256

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-2256

EUVD