Vulnerabilities (CVE)

Filtered by vendor Netgear Subscribe
Filtered by product Ssl312
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-29383 1 Netgear 2 Ssl312, Ssl312 Firmware 2023-12-10 7.5 HIGH 9.8 CRITICAL
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.
CVE-2009-0680 1 Netgear 1 Ssl312 2023-12-10 7.8 HIGH N/A
cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service (device crash) via a crafted query string, as demonstrated using directory traversal sequences.
CVE-2007-5562 1 Netgear 1 Ssl312 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page.