CVE-2009-2258: NETGEAR DG632

High severity, CVSS 7.8. EPSS: 6.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a .. (dot dot) in the nextpage parameter.

Affected products

• NETGEAR DG632: affected versions not specified
• NETGEAR DG632 Firmware: version 3.4.0_ap only

Published 2009-06-30. Last modified 2026-06-16.