CVE-2009-2256

Published: Jun 30, 2009Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg.

Affected (1)

Products: Netgear: Dg632

Netgear

1 product

Dg632

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netgear Dg632	Version 3.4.0_ap

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://securitytracker.com/id?1022403

Source: cve@mitre.org

http://www.exploit-db.com/exploits/8964

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/504341/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/504345/100/0/threaded

Source: cve@mitre.org

http://www.tomneaves.co.uk/Netgear_DG632_Remote_DoS.txt

Source: cve@mitre.org

http://securitytracker.com/id?1022403