CVE:CVE-2017-18762
CNNVD:CNNVD-202004-1907
NETGEAR R7000等都是美国网件（NETGEAR）公司的产品。NETGEAR R7000是一款无线路由器。NETGEAR D3600是一款无线调制解调器。NETGEAR WNDR3700是一款无线路由器。
多款NETGEAR产品中存在注入漏洞。该漏洞源于用户输入构造命令、数据结构或记录的操作过程中，网络系统或产品缺乏对用户输入数据的正确验证，未过滤或未正确过滤掉其中的特殊元素，导致系统或产品产生解析或解释方式错误。以下产品及版本受到影响：NETGEAR D3600 1.0.0.68之前版本；D6000 1.0.0.68之前版本；D6100 1.0.0.57之前版本；R6100 1.0.1.16之前版本；R6900P 1.2.0.22之前版本；R7000 1.0.9.10之前版本；R7000P 1.2.0.22之前版本；R7100LG 1.0.0.40之前版本；WNDR3700v4 1.0.2.88之前版本；WNDR4300v1 1.0.2.90之前版本；WNDR4300v2 1.0.0.48之前版本；WNDR4500v3 1.0.0.48之前版本；WNR2000v5 1.0.0.58之前版本。
solution:Upgrade netgear d3600_firmware to a higher version than 1.0.0.68,and avoid the version (,1.0.0.68); Upgrade netgear d6000_firmware to a higher version than 1.0.0.68,and avoid the version (,1.0.0.68); Upgrade netgear d6100_firmware to a higher version than 1.0.0.57,and avoid the version (,1.0.0.57); Upgrade netgear r6100_firmware to a higher version than 1.0.1.16,and avoid the version (,1.0.1.16); Upgrade netgear r6900p_firmware to a higher version than 1.2.0.22,and avoid the version (,1.2.0.22); Upgrade netgear r7000_firmware to a higher version than 1.0.9.10,and avoid the version (,1.0.9.10); Upgrade netgear r7000p_firmware to a higher version than 1.2.0.22,and avoid the version (,1.2.0.22); Upgrade netgear r7100lg_firmware to a higher version than 1.0.0.40,and avoid the version (,1.0.0.40); Upgrade netgear wndr3700_firmware to a higher version than 1.0.2.88,and avoid the version (,1.0.2.88); Upgrade netgear wndr4300_firmware to a higher version than 1.0.2.90,1.0.0.48,and avoid the version (,1.0.2.90),(,1.0.0.48); Upgrade netgear wndr4500_firmware to a higher version than 1.0.0.48,and avoid the version (,1.0.0.48); Upgrade netgear wnr2000_firmware to a higher version than 1.0.0.58,and avoid the version (,1.0.0.58)