CVE:CVE-2021-45660
CNNVD:CNNVD-202112-2459
NETGEAR是美国网件（NETGEAR）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。
NETGEAR 设备存在注入漏洞，该漏洞会受到服务器端注入的影响。以下产品及版本受到影响：2.5.1.16之前的RBK40、2.5.1.16之前的RBR40、2.5.1.16之前的RBS40、2.5.1.16之前的RBK20、2.5.1.16之前的RBS20、2.5.1.16之前的RBK50、2.5.1.16之前的RBS50、2.6.1.40之前的RBS50Y。
solution:Upgrade netgear rbk40_firmware to a higher version than 2.5.1.16,and avoid the version (,2.5.1.16); Upgrade netgear rbr40_firmware to a higher version than 2.5.1.16,and avoid the version (,2.5.1.16); Upgrade netgear rbs40_firmware to a higher version than 2.5.1.16,and avoid the version (,2.5.1.16); Upgrade netgear rbk20_firmware to a higher version than 2.5.1.16,and avoid the version (,2.5.1.16); Upgrade netgear rbr20_firmware to a higher version than 2.5.1.16,and avoid the version (,2.5.1.16); Upgrade netgear rbs20_firmware to a higher version than 2.5.1.16,and avoid the version (,2.5.1.16); Upgrade netgear rbk50_firmware to a higher version than 2.5.1.16,and avoid the version (,2.5.1.16); Upgrade netgear rbr50_firmware to a higher version than 2.5.1.16,and avoid the version (,2.5.1.16); Upgrade netgear rbs50_firmware to a higher version than 2.5.1.16,and avoid the version (,2.5.1.16); Upgrade netgear rbs50y_firmware to a higher version than 2.6.1.40,and avoid the version (,2.6.1.40)