CVE:CVE-2017-5521
CNNVD:CNNVD-201701-454
NETGEAR R8500等都是美国网件（NETGEAR）公司的路由器产品。
多款NETGEAR产品中存在安全漏洞。攻击者可通过向Web管理服务器发送特制的请求利用该漏洞造成密码泄露。以下产品受到影响：NETGEAR R8500；R8300；R7000；R6400；R7300；R7100LG；R6300v2；WNDR3400v3；WNR3500Lv2；R6250；R6700；R6900；R8000。
solution:Upgrade netgear r6200_firmware to a higher version than 1.0.1.56_1.0.43,and avoid the version 1.0.1.56_1.0.43; Upgrade netgear r6300_firmware to a higher version than 1.0.2.78_1.0.58,and avoid the version 1.0.2.78_1.0.58; Upgrade netgear vegn2610_firmware to a higher version than 1.0.0.36,and avoid the version 1.0.0.36; Upgrade netgear ac1450_firmware to a higher version than 1.0.0.34_10.0.16,and avoid the version 1.0.0.34_10.0.16; Upgrade netgear wnr1000v3_firmware to a higher version than 1.0.2.68_60.0.93,and avoid the version 1.0.2.68_60.0.93; Upgrade netgear wndr3700v3_firmware to a higher version than 1.0.0.40_1.0.32,and avoid the version 1.0.0.40_1.0.32; Upgrade netgear wndr4000_firmware to a higher version than 1.0.2.4_9.1.86,and avoid the version 1.0.2.4_9.1.86; Upgrade netgear wndr4500_firmware to a higher version than 1.0.1.44_1.0.73,and avoid the version 1.0.1.44_1.0.73; Upgrade netgear d6400_firmware to a higher version than 1.0.0.44,and avoid the version 1.0.0.44; Upgrade netgear d6220_firmware to a higher version than 1.0.0.12,and avoid the version 1.0.0.12; Upgrade netgear d6300_firmware to a higher version than 1.0.0.96,and avoid the version 1.0.0.96; Upgrade netgear d6300b_firmware to a higher version than 1.0.0.40,and avoid the version 1.0.0.40; Upgrade netgear dgn2200bv4_firmware to a higher version than 1.0.0.68,and avoid the version 1.0.0.68