CVE-2009-0680: NETGEAR SSL312

High severity, CVSS 7.8. EPSS: 8.4% chance of exploitation in the next 30 days.

cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service (device crash) via a crafted query string, as demonstrated using directory traversal sequences.

Affected products

• NETGEAR SSL312: affected versions not specified

Published 2009-02-22. Last modified 2026-06-16.