Marc Ruef has reported two vulnerabilities in Netgear RP114, which can be exploited by malicious people to cause a DoS (Denial of Service) and bypass the URL filtering functionality.

1) An error within the handling of requested URLs can be exploited to access a website containing filtered keywords by supplying an overly long (about 220 bytes), specially crafted request.

Example where domain name is a filtered keyword:
http://www.[filtered_keyword]/?%20%20%20...[x70]...%20%20%20

2) An error in the handling of multiple connections can be exploited via TCP SYN flooding attacks (more than 740 persistent and half-open connections) to temporary stop routing between the internal and external interface.

Solution
Use another product.

Provided and/or discovered by
Marc Ruef

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area