Neither of these are barn-burners, honestly - one's a possible denial-of-service and the other is a _possible_ privileged exploit, both of which require the attack to come *from the internal network*. While I agree it's nice to have _all_ vulnerabilities mitigated, that isn't realistic, and these two in particular fall somewhat into the "meh" category of risk. Yes, they should be fixed, but no, I don't think it likely (or necessary) that Netgear engineering is going to drop whatever it's doing to jump right on this.
Rodney
