CVE:CVE-2020-11770
CNNVD:CNNVD-202004-1179
NETGEAR D8500等都是美国网件（NETGEAR）公司的产品。NETGEAR D8500是一款无线调制解调器。NETGEAR R6250是一款无线路由器。NETGEAR R6700是一款无线路由器。
多款NETGEAR产品中存在注入漏洞。该漏洞源于用户输入构造命令、数据结构或记录的操作过程中，网络系统或产品缺乏对用户输入数据的正确验证，未过滤或未正确过滤掉其中的特殊元素，导致系统或产品产生解析或解释方式错误。以下产品及版本受到影响：NETGEAR D6220 1.0.0.52之前版本；D6400 1.0.0.86之前版本；D7000v2 1.0.0.53之前版本；D8500 1.0.3.44之前版本；R6220 1.1.0.80之前版本；R6250 1.0.4.34之前版本；R6260 1.1.0.64之前版本；R6400 1.0.1.46之前版本；R6400v2 1.0.2.66之前版本；R6700 1.0.2.6之前版本；R6700v2 1.2.0.36之前版本；R6700v3 1.0.2.66之前版本；R6800 1.2.0.36之前版本；R6900 1.0.2.4之前版本；R6900P 1.3.1.64之前版本；R6900v2 1.2.0.36之前版本；R7000 1.0.9.42之前版本；R7000P 1.3.1.64之前版本；R7100LG 1.0.0.50之前版本；R7300DST 1.0.0.70之前版本；R7800 1.0.2.60之前版本；R7900 1.0.3.8之前版本；R7900P 1.4.1.30之前版本；R8000 1.0.4.28之前版本；R8000P 1.4.1.30之前版本；R8300 1.0.2.128之前版本；R8500 1.0.2.128之前版本；R8900 1.0.4.12之前版本；R9000 1.0.4.12之前版本；XR500 2.3.2.32之前版本。
solution:Upgrade netgear d6220_firmware to a higher version than 1.0.0.52,and avoid the version (,1.0.0.52); Upgrade netgear d6400_firmware to a higher version than 1.0.0.86,and avoid the version (,1.0.0.86); Upgrade netgear d8500_firmware to a higher version than 1.0.3.44,and avoid the version (,1.0.3.44); Upgrade netgear r6220_firmware to a higher version than 1.1.0.80,and avoid the version (,1.1.0.80); Upgrade netgear r6250_firmware to a higher version than 1.0.4.34,and avoid the version (,1.0.4.34); Upgrade netgear r6260_firmware to a higher version than 1.1.0.64,and avoid the version (,1.1.0.64); Upgrade netgear r6400_firmware to a higher version than 1.0.1.46,1.0.2.66,and avoid the version (,1.0.1.46),(,1.0.2.66); Upgrade netgear r6700_firmware to a higher version than 1.0.2.6,1.2.0.36,1.0.2.66,and avoid the version (,1.0.2.6),(,1.2.0.36),(,1.0.2.66); Upgrade netgear r6800_firmware to a higher version than 1.2.0.36,and avoid the version (,1.2.0.36); Upgrade netgear r6900_firmware to a higher version than 1.0.2.4,1.2.0.36,and avoid the version (,1.0.2.4),(,1.2.0.36); Upgrade netgear r6900p_firmware to a higher version than 1.3.1.64,and avoid the version (,1.3.1.64); Upgrade netgear r7000_firmware to a higher version than 1.0.9.42,and avoid the version (,1.0.9.42); Upgrade netgear r7000p_firmware to a higher version than 1.3.1.64,and avoid the version (,1.3.1.64); Upgrade netgear r7100lg_firmware to a higher version than 1.0.0.50,and avoid the version (,1.0.0.50); Upgrade netgear r7300dst_firmware to a higher version than 1.0.0.70,and avoid the version (,1.0.0.70); Upgrade netgear r7800_firmware to a higher version than 1.0.2.60,and avoid the version (,1.0.2.60); Upgrade netgear r7900_firmware to a higher version than 1.0.3.8,and avoid the version (,1.0.3.8); Upgrade netgear r7900p_firmware to a higher version than 1.4.1.30,and avoid the version (,1.4.1.30); Upgrade netgear r8000_firmware to a higher version than 1.0.4.28,and avoid the version (,1.0.4.28); Upgrade netgear r8000p_firmware to a higher version than 1.4.1.30,and avoid the version (,1.4.1.30); Upgrade netgear r8300_firmware to a higher version than 1.0.2.128,and avoid the version (,1.0.2.128); Upgrade netgear r8500_firmware to a higher version than 1.0.2.128,and avoid the version (,1.0.2.128); Upgrade netgear r8900_firmware to a higher version than 1.0.4.12,and avoid the version (,1.0.4.12); Upgrade netgear r9000_firmware to a higher version than 1.0.4.12,and avoid the version (,1.0.4.12); Upgrade netgear xr500_firmware to a higher version than 2.3.2.32,and avoid the version (,2.3.2.32); Upgrade netgear d7000_firmware to a higher version than 1.0.0.53,and avoid the version (,1.0.0.53)