CVE:CVE-2018-21156
CNNVD:CNNVD-202004-2206
NETGEAR WNR3500L等都是美国网件（NETGEAR）公司的产品。WNR3500L是一款无线路由器。NETGEAR D6220是一款无线调制解调器。WN2500RP是一款无线网络信号扩展器。
多款NETGEAR产品中存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品及版本受到影响：NETGEAR D6220 1.0.0.38之前版本；D6400 1.0.0.74之前版本；D7000v2 1.0.0.74之前版本；D8500 1.0.3.39之前版本；DGN2200v4 1.0.0.102之前版本；DGN2200Bv4 1.0.0.102之前版本；EX3700 1.0.0.70之前版本；EX3800 1.0.0.70之前版本；EX6000 1.0.0.30之前版本；EX6100 1.0.2.22之前版本；EX6120 1.0.0.40之前版本；EX6130 1.0.0.22之前版本；EX6150 1.0.0.38之前版本；EX6200 1.0.3.86之前版本；EX7000 1.0.0.64之前版本；R6250 1.0.4.20之前版本；R6300v2 1.0.4.22之前版本；R6400 1.0.1.32之前版本；R6400v2 1.0.2.52之前版本；R6700 1.0.1.44之前版本；R6900 1.0.1.44之前版本；R6900P 1.3.0.18之前版本；R7000 1.0.9.28之前版本；R7000P 1.3.0.18之前版本；R7300DST 1.0.0.62之前版本；R7900 1.0.2.10之前版本；R7900P 1.3.0.10之前版本；R8000 1.0.4.12之前版本；R8000P 1.3.0.10之前版本；R8300 1.0.2.116之前版本；R8500 1.0.2.116之前版本；WN2500RPv2 1.0.1.52之前版本；WNDR3400v3 1.0.1.18之前版本；WNR3500Lv2 1.2.0.46之前版本。
solution:Upgrade netgear d6220_firmware to a higher version than 1.0.0.38,and avoid the version (,1.0.0.38); Upgrade netgear d6400_firmware to a higher version than 1.0.0.74,and avoid the version (,1.0.0.74); Upgrade netgear d7000_firmware to a higher version than 1.0.0.74,and avoid the version (,1.0.0.74); Upgrade netgear d8500_firmware to a higher version than 1.0.3.39,and avoid the version (,1.0.3.39); Upgrade netgear dgn2200_firmware to a higher version than 1.0.0.102,and avoid the version (,1.0.0.102); Upgrade netgear dgn2200b_firmware to a higher version than 1.0.0.102,and avoid the version (,1.0.0.102); Upgrade netgear ex3700_firmware to a higher version than 1.0.0.70,and avoid the version (,1.0.0.70); Upgrade netgear ex3800_firmware to a higher version than 1.0.0.70,and avoid the version (,1.0.0.70); Upgrade netgear ex6000_firmware to a higher version than 1.0.0.30,and avoid the version (,1.0.0.30); Upgrade netgear ex6100_firmware to a higher version than 1.0.2.22,and avoid the version (,1.0.2.22); Upgrade netgear ex6120_firmware to a higher version than 1.0.0.40,and avoid the version (,1.0.0.40); Upgrade netgear ex6130_firmware to a higher version than 1.0.0.22,and avoid the version (,1.0.0.22); Upgrade netgear ex6150_firmware to a higher version than 1.0.0.38,and avoid the version (,1.0.0.38); Upgrade netgear ex6200_firmware to a higher version than 1.0.3.86,and avoid the version (,1.0.3.86); Upgrade netgear ex7000_firmware to a higher version than 1.0.0.64,and avoid the version (,1.0.0.64); Upgrade netgear r6250_firmware to a higher version than 1.0.4.20,and avoid the version (,1.0.4.20); Upgrade netgear r6300_firmware to a higher version than 1.0.4.22,and avoid the version (,1.0.4.22); Upgrade netgear r6400_firmware to a higher version than 1.0.1.32,1.0.2.52,and avoid the version (,1.0.1.32),(,1.0.2.52); Upgrade netgear r6700_firmware to a higher version than 1.0.1.44,and avoid the version (,1.0.1.44); Upgrade netgear r6900_firmware to a higher version than 1.0.1.44,and avoid the version (,1.0.1.44); Upgrade netgear r6900p_firmware to a higher version than 1.3.0.18,and avoid the version (,1.3.0.18); Upgrade netgear r7000_firmware to a higher version than 1.0.9.28,and avoid the version (,1.0.9.28); Upgrade netgear r7000p_firmware to a higher version than 1.3.0.18,and avoid the version (,1.3.0.18); Upgrade netgear r7300dst_firmware to a higher version than 1.0.0.62,and avoid the version (,1.0.0.62); Upgrade netgear r7900_firmware to a higher version than 1.0.2.10,and avoid the version (,1.0.2.10); Upgrade netgear r7900p_firmware to a higher version than 1.3.0.10,and avoid the version (,1.3.0.10); Upgrade netgear r8000_firmware to a higher version than 1.0.4.12,and avoid the version (,1.0.4.12); Upgrade netgear r8000p_firmware to a higher version than 1.3.0.10,and avoid the version (,1.3.0.10); Upgrade netgear r8300_firmware to a higher version than 1.0.2.116,and avoid the version (,1.0.2.116); Upgrade netgear r8500_firmware to a higher version than 1.0.2.116,and avoid the version (,1.0.2.116); Upgrade netgear wn2500rp_firmware to a higher version than 1.0.1.52,and avoid the version (,1.0.1.52); Upgrade netgear wndr3400_firmware to a higher version than 1.0.1.18,and avoid the version (,1.0.1.18); Upgrade netgear wnr3500l_firmware to a higher version than 1.2.0.46,and avoid the version (,1.2.0.46)