CVE:CVE-2021-45624
CNNVD:CNNVD-202112-2423
Netgear NETGEAR是美国网件（Netgear）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。
某些NETGEAR设备存在安全漏洞，未经认证的攻击者可利用该漏洞进行命令注入。以下产品及版本受到影响：1.0.0.66之前的D7000v2, 1.0.3.58之前的D8500, 1.0.11.110之前的R7000, 1.0.0.72之前的R7100LG, 1.0.4.30之前的R7900, 1.0.4.62之前的R8000, 1.0.3.56之前的XR300, 1.3.2.132之前的R7000P, 1.0.2.144之前的R8500, 1.3.2.132之前的R6900P, 1.0.2.144之前的R8300。
solution:Upgrade netgear d7000v2_firmware to a higher version than 1.0.0.66,and avoid the version (,1.0.0.66); Upgrade netgear d8500_firmware to a higher version than 1.0.3.58,and avoid the version (,1.0.3.58); Upgrade netgear r7000_firmware to a higher version than 1.0.11.110,and avoid the version (,1.0.11.110); Upgrade netgear r7100lg_firmware to a higher version than 1.0.0.72,and avoid the version (,1.0.0.72); Upgrade netgear r7900_firmware to a higher version than 1.0.4.30,and avoid the version (,1.0.4.30); Upgrade netgear r8000_firmware to a higher version than 1.0.4.62,and avoid the version (,1.0.4.62); Upgrade netgear xr300_firmware to a higher version than 1.0.3.56,and avoid the version (,1.0.3.56); Upgrade netgear r7000p_firmware to a higher version than 1.3.2.132,and avoid the version (,1.3.2.132); Upgrade netgear r8500_firmware to a higher version than 1.0.2.144,and avoid the version (,1.0.2.144); Upgrade netgear r6900p_firmware to a higher version than 1.3.2.132,and avoid the version (,1.3.2.132); Upgrade netgear r8300_firmware to a higher version than 1.0.2.144,and avoid the version (,1.0.2.144)