CVE:CVE-2022-27643
CNNVD:CNNVD-202203-2053
NETGEAR R6700v3是美国网件（NETGEAR）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。
NETGEAR R6700v3 1.0.4.120_10.0.91版本存在授权问题漏洞。该漏洞源于在将用户提供的数据复制到缓冲区之前未正确验证其长度。攻击者利用该漏洞在root环境中执行代码。
solution:Upgrade netgear r6400_firmware to a higher version than 1.0.1.78,1.0.4.126,and avoid the version (,1.0.1.78),(,1.0.4.126); Upgrade netgear r6700_firmware to a higher version than 1.0.4.126,and avoid the version (,1.0.4.126); Upgrade netgear r6900p_firmware to a higher version than 1.3.3.148,and avoid the version (,1.3.3.148); Upgrade netgear r7000_firmware to a higher version than 1.0.11.134,and avoid the version (,1.0.11.134); Upgrade netgear r7000p_firmware to a higher version than 1.3.3.148,and avoid the version (,1.3.3.148); Upgrade netgear r7850_firmware to a higher version than 1.0.5.84,and avoid the version (,1.0.5.84); Upgrade netgear r7900p_firmware to a higher version than 1.4.3.88,and avoid the version (,1.4.3.88); Upgrade netgear r7960p_firmware to a higher version than 1.4.3.88,and avoid the version (,1.4.3.88); Upgrade netgear r8000_firmware to a higher version than 1.0.4.84,and avoid the version (,1.0.4.84); Upgrade netgear r8000p_firmware to a higher version than 1.4.3.88,and avoid the version (,1.4.3.88); Upgrade netgear r8500_firmware to a higher version than 1.0.2.158,and avoid the version (,1.0.2.158); Upgrade netgear rax200_firmware to a higher version than 1.0.6.138,and avoid the version (,1.0.6.138); Upgrade netgear rax75_firmware to a higher version than 1.0.6.138,and avoid the version (,1.0.6.138); Upgrade netgear rax80_firmware to a higher version than 1.0.6.138,and avoid the version (,1.0.6.138); Upgrade netgear rs400_firmware to a higher version than 1.5.1.86,and avoid the version (,1.5.1.86); Upgrade netgear r7100lg_firmware to a higher version than 1.0.0.76,and avoid the version (,1.0.0.76); Upgrade netgear wndr3400_firmware to a higher version than 1.0.1.44,and avoid the version (,1.0.1.44); Upgrade netgear wnr3500l_firmware to a higher version than 1.2.0.72,and avoid the version (,1.2.0.72); Upgrade netgear xr300_firmware to a higher version than 1.0.3.72,and avoid the version (,1.0.3.72); Upgrade netgear dc112a_firmware to a higher version than 1.0.0.64,and avoid the version (,1.0.0.64); Upgrade netgear d6220_firmware to a higher version than 1.0.0.80,and avoid the version (,1.0.0.80); Upgrade netgear d6400_firmware to a higher version than 1.0.0.114,and avoid the version (,1.0.0.114); Upgrade netgear ex3700_firmware to a higher version than 1.0.0.96,and avoid the version (,1.0.0.96); Upgrade netgear ex3800_firmware to a higher version than 1.0.0.96,and avoid the version (,1.0.0.96); Upgrade netgear ex6120_firmware to a higher version than 1.0.0.68,and avoid the version (,1.0.0.68); Upgrade netgear ex6130_firmware to a higher version than 1.0.0.48,and avoid the version (,1.0.0.48); Upgrade netgear d7000v2_firmware to a higher version than 1.0.0.80,and avoid the version (,1.0.0.80)