CVE:CVE-2020-17409
CNNVD:CNNVD-202010-583
mini_httpd是个人开发者的一款嵌入式Web服务器。
mini_httpd service 存在安全漏洞，该漏洞源于访问受保护页面时不正确的字符串匹配逻辑导致的。攻击者可利用该漏洞可以利用此漏洞公开存储的凭证，从而导致进一步的破坏。以下产品及版本受到影响：NETGEAR R6120、R6080、R6260、R6220、R6020、JNR3210和固件1.0.66的WNR2020路由器。
solution:Upgrade netgear r6020_firmware to a higher version than 1.0.0.44,and avoid the version (,1.0.0.44); Upgrade netgear r6080_firmware to a higher version than 1.0.0.44,and avoid the version (,1.0.0.44); Upgrade netgear r6120_firmware to a higher version than 1.0.0.70,and avoid the version (,1.0.0.70); Upgrade netgear r6220_firmware to a higher version than 1.1.0.100,and avoid the version (,1.1.0.100); Upgrade netgear r6230_firmware to a higher version than 1.1.0.100,and avoid the version (,1.1.0.100); Upgrade netgear r6260_firmware to a higher version than 1.1.0.76,and avoid the version (,1.1.0.76); Upgrade netgear r6330_firmware to a higher version than 1.1.0.76,and avoid the version (,1.1.0.76); Upgrade netgear r6350_firmware to a higher version than 1.1.0.76,and avoid the version (,1.1.0.76); Upgrade netgear r6850_firmware to a higher version than 1.1.0.76,and avoid the version (,1.1.0.76); Upgrade netgear jnr3210_firmware to a higher version than -; Upgrade netgear wnr2020_firmware to a higher version than -