CVE:CVE-2021-34865
CNNVD:CNNVD-202108-2714
Netgear NETGEAR是美国网件（Netgear）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。
多款 NETGEAR 路由器设备存在授权问题漏洞，该漏洞源于产品中的 mini_httpd 服务未对保护页面添加有效的访问保护措施。攻击者可利用特殊字符绕过身份验证访问保护页面并可以root权限在上下文中执行恶意代码。
solution:Upgrade netgear ac2100_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88); Upgrade netgear ac2400_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88); Upgrade netgear ac2600_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88); Upgrade netgear d7000v1_firmware to a higher version than 1.0.1.80,and avoid the version (,1.0.1.80); Upgrade netgear r6220_firmware to a higher version than 1.1.0.110,and avoid the version (,1.1.0.110); Upgrade netgear r6230_firmware to a higher version than 1.1.0.110,and avoid the version (,1.1.0.110); Upgrade netgear r6260_firmware to a higher version than 1.1.0.84,and avoid the version (,1.1.0.84); Upgrade netgear r6330_firmware to a higher version than 1.1.0.84,and avoid the version (,1.1.0.84); Upgrade netgear r6350_firmware to a higher version than 1.1.0.84,and avoid the version (,1.1.0.84); Upgrade netgear r6700v2_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88); Upgrade netgear r6800_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88); Upgrade netgear r6850_firmware to a higher version than 1.1.0.84,and avoid the version (,1.1.0.84); Upgrade netgear r6900v2_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88); Upgrade netgear r7200_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88); Upgrade netgear r7350_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88); Upgrade netgear r7400_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88); Upgrade netgear r7450_firmware to a higher version than 1.2.0.88,and avoid the version (,1.2.0.88)