CVE:CVE-2020-27861
CNNVD:CNNVD-202102-1082
Netgear NETGEAR是美国网件（Netgear）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。
NETGEAR Orbi中存在操作系统命令注入漏洞，该漏洞源于外部输入数据构造操作系统可执行命令过程中，网络系统或产品未正确过滤其中的特殊字符、命令等。攻击者可利用该漏洞执行非法操作系统命令。
solution:Upgrade netgear cbk40_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear cbk43_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear cbr40_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear ex6200_firmware to a higher version than 1.0.1.82,and avoid the version (,1.0.1.82); Upgrade netgear ex7700_firmware to a higher version than 1.0.0.210,and avoid the version (,1.0.0.210); Upgrade netgear ex8000_firmware to a higher version than 1.0.1.224,and avoid the version (,1.0.1.224); Upgrade netgear rbk12_firmware to a higher version than 2.6.1.44,and avoid the version (,2.6.1.44); Upgrade netgear rbk13_firmware to a higher version than 2.6.1.44,and avoid the version (,2.6.1.44); Upgrade netgear rbk14_firmware to a higher version than 2.6.1.44,and avoid the version (,2.6.1.44); Upgrade netgear rbk15_firmware to a higher version than 2.6.1.44,and avoid the version (,2.6.1.44); Upgrade netgear rbr10_firmware to a higher version than 2.6.1.44,and avoid the version (,2.6.1.44); Upgrade netgear rbs10_firmware to a higher version than 2.6.1.44,and avoid the version (,2.6.1.44); Upgrade netgear rbk20w_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk23w_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk20_router_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk20_satellite_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear rbk22_router_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk22_satellite_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear rbk23_router_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk23_satellite_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear rbr20_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbs20_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear rbk30_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk33_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk40_router_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk40_satellite_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear rbk43_router_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk43_satellite_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear rbk43s_router_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk43s_satellite_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear rbk44_router_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbk44_satellite_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear rbr40_firmware to a higher version than 2.6.1.36,and avoid the version (,2.6.1.36); Upgrade netgear rbs40_firmware to a higher version than 2.6.1.38,and avoid the version (,2.6.1.38); Upgrade netgear rbk50_firmware to a higher version than 2.6.1.40,and avoid the version (,2.6.1.40); Upgrade netgear rbk50v_firmware to a higher version than 2.6.1.40,and avoid the version (,2.6.1.40); Upgrade netgear rbk52w_firmware to a higher version than 2.6.1.40,and avoid the version (,2.6.1.40); Upgrade netgear rbr50_firmware to a higher version than 2.6.1.40,and avoid the version (,2.6.1.40); Upgrade netgear rbs50_firmware to a higher version than 2.6.1.40,and avoid the version (,2.6.1.40)