CVE:CVE-2021-41314
CNNVD:CNNVD-202109-1138
NETGEAR是美国网件（NETGEAR）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。
多种 NETGEAR 交换机存在注入漏洞，该漏洞源于产品Web UI中的密码字段未能正确处理用户输入数据。攻击者可通过该漏洞导致恶意文件创建以及权限提升。以下产品及版本受到影响： GC108P 1.0.8.2 之前版本、GC108PP 1.0.8.2 之前版本、GS108Tv3 7.0.7.2 之前版本、GS110TPP 7.0.7.2 之前版本、GS110TPv3 7.0.7.2 之前版本、GS110TUP 1.0.5.3 之前版本、GS308T 1.0.3.2 之前版本、GS310TP 1.0.3.2 之前版本、GS710TUP 1.0.3.2 之前版本。
solution:Upgrade netgear gc108p_firmware to a higher version than 1.0.8.2,and avoid the version (,1.0.8.2); Upgrade netgear gc108pp_firmware to a higher version than 1.0.8.2,and avoid the version (,1.0.8.2); Upgrade netgear gs108t_firmware to a higher version than 7.0.7.2,and avoid the version (,7.0.7.2); Upgrade netgear gs110tpp_firmware to a higher version than 7.0.7.2,and avoid the version (,7.0.7.2); Upgrade netgear gs110tp_firmware to a higher version than 7.0.7.2,and avoid the version (,7.0.7.2); Upgrade netgear gs110tup_firmware to a higher version than 1.0.5.3,and avoid the version (,1.0.5.3); Upgrade netgear gs308t_firmware to a higher version than 1.0.3.2,and avoid the version (,1.0.3.2); Upgrade netgear gs310tp_firmware to a higher version than 1.0.3.2,and avoid the version (,1.0.3.2); Upgrade netgear gs710tup_firmware to a higher version than 1.0.5.3,and avoid the version (,1.0.5.3); Upgrade netgear gs716tp_firmware to a higher version than 1.0.4.2,and avoid the version (,1.0.4.2); Upgrade netgear gs716tpp_firmware to a higher version than 1.0.4.2,and avoid the version (,1.0.4.2); Upgrade netgear gs724tpp_firmware to a higher version than 2.0.6.3,and avoid the version (,2.0.6.3); Upgrade netgear gs724tp_firmware to a higher version than 2.0.6.3,and avoid the version (,2.0.6.3); Upgrade netgear gs728tpp_firmware to a higher version than 2.0.6.3,and avoid the version (,2.0.6.3); Upgrade netgear gs728tp_firmware to a higher version than 2.0.6.3,and avoid the version (,2.0.6.3); Upgrade netgear gs750e_firmware to a higher version than 1.0.1.10,and avoid the version (,1.0.1.10); Upgrade netgear gs752tpp_firmware to a higher version than 6.0.8.2,and avoid the version (,6.0.8.2); Upgrade netgear gs752tp_firmware to a higher version than 6.0.8.2,and avoid the version (,6.0.8.2); Upgrade netgear ms510txm_firmware to a higher version than 1.0.4.2,and avoid the version (,1.0.4.2); Upgrade netgear ms510txup_firmware to a higher version than 1.0.4.2,and avoid the version (,1.0.4.2)