NETGEAR DG632 vulnerabilities

3 CVEs affecting NETGEAR DG632, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-2258, published 2009-06-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-2256, published 2009-06-30. High severity, CVSS 7.8. EPSS: 7.4% chance of exploitation in the next 30 days. The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg.
CVE-2009-2257, published 2009-06-30. High severity, CVSS 7.8. EPSS: 7.2% chance of exploitation in the next 30 days. The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authentication via a direct request to (1) gateway/commands/saveconfig.html, and (2)…
CVE-2009-2258, published 2009-06-30. High severity, CVSS 7.8. EPSS: 6.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a .. (dot…