CVE:CVE-2020-27872
CNNVD:CNNVD-202102-385
Netgear NETGEAR R7450是美国网件（Netgear）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。
NETGEAR R7450 1.2.0.62_1.0.1 routers 存在安全漏洞，该漏洞源于密码恢复过程中状态跟踪不当。攻击者可利用该漏洞绕过认证。
solution:Upgrade netgear ac2100_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear ac2400_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear ac2600_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear r6700_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear r6800_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear r6900_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear r7200_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear r7350_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear r7400_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear r7450_firmware to a higher version than 1.2.0.76,and avoid the version (,1.2.0.76); Upgrade netgear r6220_firmware to a higher version than 1.1.0.104,and avoid the version (,1.1.0.104); Upgrade netgear r6230_firmware to a higher version than 1.1.0.104,and avoid the version (,1.1.0.104); Upgrade netgear r6260_firmware to a higher version than 1.1.0.78,and avoid the version (,1.1.0.78); Upgrade netgear r6330_firmware to a higher version than 1.1.0.78,and avoid the version (,1.1.0.78); Upgrade netgear r6350_firmware to a higher version than 1.1.0.78,and avoid the version (,1.1.0.78); Upgrade netgear r6850_firmware to a higher version than 1.1.0.78,and avoid the version (,1.1.0.78); Upgrade netgear r6120_firmware to a higher version than 1.0.0.76,and avoid the version (,1.0.0.76); Upgrade netgear r6020_firmware to a higher version than 1.0.0.48,and avoid the version (,1.0.0.48); Upgrade netgear r6080_firmware to a higher version than 1.0.0.48,and avoid the version (,1.0.0.48)