CVE:CVE-2017-18785
CNNVD:CNNVD-202004-1888
NETGEAR WNR3500L等都是美国网件（NETGEAR）公司的产品。WNR3500L是一款无线路由器。NETGEAR R6400是一款无线路由器。NETGEAR D6200是一款无线调制解调器。
多款NETGEAR产品中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：NETGEAR D3600 1.0.0.67之前版本；D6000 1.0.0.67之前版本；D6100 1.0.0.56之前版本；D6200 1.1.00.24之前版本；D6220 1.0.0.32之前版本；D6400 1.0.0.66之前版本；D7000 1.0.1.52之前版本；D7000v2 1.0.0.44之前版本；D7800 1.0.1.30之前版本；D8500 1.0.3.35之前版本；DGN2200v4 1.0.0.96之前版本；DGN2200Bv4 1.0.0.96之前版本；EX2700 1.0.1.28之前版本；EX6100v2 1.0.1.54之前版本；EX6150v2 1.0.1.54之前版本；EX6200v2 1.0.1.52之前版本；EX6400 1.0.1.72之前版本；EX7300 1.0.1.72之前版本；EX8000 1.0.0.102之前版本；JNR1010v2 1.1.0.44之前版本；JWNR2010v5 1.1.0.44之前版本；PR2000 1.0.0.20之前版本；R6020 1.0.0.26之前版本；R6080 1.0.0.26之前版本；R6100 1.0.1.20之前版本；R6250 1.0.4.16之前版本；R6300v2 1.0.4.18之前版本；R6400 1.0.1.32之前版本；R6400v2 1.0.2.46之前版本；R6700 1.0.1.36之前版本；R6800 1.2.0.12之前版本；R6900v2 1.2.0.12之前版本；R6700v2 1.2.0.12之前版本；R6900 1.0.1.34之前版本；R6900P 1.3.0.8之前版本；R7000 1.0.9.18之前版本；R7000P 1.3.0.8之前版本；R7100LG 1.0.0.34之前版本；R7300DST 1.0.0.58之前版本；R7500 1.0.0.118之前版本；R7500v2 1.0.3.24之前版本；R7800 1.0.2.40之前版本；R7900 1.0.2.4之前版本；R7900P 1.1.5.14之前版本；R8000 1.0.4.4之前版本；R8000P 1.1.5.14之前版本；R8500 1.0.2.110之前版本；R8300 1.0.2.110之前版本；R9000 1.0.2.52之前版本；WN2000RPTv3 1.0.1.8之前版本；WN3000RPv3 1.0.2.50之前版本；WN3100RPv2 1.0.0.42之前版本；WNDR3400v3 1.0.1.16之前版本；WNDR3700v4 1.0.2.94之前版本；WNDR4300 1.0.2.96之前版本；WNDR4300v2 1.0.0.50之前版本；WNDR4500v3 1.0.0.50之前版本；WNR1000v4 1.1.0.44之前版本；WNR2000v5 1.0.0.62之前版本；WNR2020 1.1.0.44之前版本；WNR2050 1.1.0.44之前版本；WNR3500Lv2 1.2.0.46之前版本。
solution:Upgrade netgear d3600_firmware to a higher version than 1.0.0.67,and avoid the version (,1.0.0.67); Upgrade netgear d6000_firmware to a higher version than 1.0.0.67,and avoid the version (,1.0.0.67); Upgrade netgear d6100_firmware to a higher version than 1.0.0.56,and avoid the version (,1.0.0.56); Upgrade netgear d6200_firmware to a higher version than 1.1.00.24,and avoid the version (,1.1.00.24); Upgrade netgear d6220_firmware to a higher version than 1.0.0.32,and avoid the version (,1.0.0.32); Upgrade netgear d6400_firmware to a higher version than 1.0.0.66,and avoid the version (,1.0.0.66); Upgrade netgear d7000_firmware to a higher version than 1.0.1.52,1.0.0.44,and avoid the version (,1.0.1.52),(,1.0.0.44); Upgrade netgear d7800_firmware to a higher version than 1.0.1.30,and avoid the version (,1.0.1.30); Upgrade netgear d8500_firmware to a higher version than 1.0.3.35,and avoid the version (,1.0.3.35); Upgrade netgear dgn2200_firmware to a higher version than 1.0.0.96,and avoid the version (,1.0.0.96); Upgrade netgear dgn2200b_firmware to a higher version than 1.0.0.96,and avoid the version (,1.0.0.96); Upgrade netgear ex2700_firmware to a higher version than 1.0.1.28,and avoid the version (,1.0.1.28); Upgrade netgear ex6100_firmware to a higher version than 1.0.1.54,and avoid the version (,1.0.1.54); Upgrade netgear ex6150_firmware to a higher version than 1.0.1.54,and avoid the version (,1.0.1.54); Upgrade netgear ex6200_firmware to a higher version than 1.0.1.52,and avoid the version (,1.0.1.52); Upgrade netgear ex6400_firmware to a higher version than 1.0.1.72,and avoid the version (,1.0.1.72); Upgrade netgear ex7300_firmware to a higher version than 1.0.1.72,and avoid the version (,1.0.1.72); Upgrade netgear ex8000_firmware to a higher version than 1.0.0.102,and avoid the version (,1.0.0.102); Upgrade netgear jnr1010_firmware to a higher version than 1.1.0.44,and avoid the version (,1.1.0.44); Upgrade netgear jwnr2010_firmware to a higher version than 1.1.0.44,and avoid the version (,1.1.0.44); Upgrade netgear pr2000_firmware to a higher version than 1.0.0.20,and avoid the version (,1.0.0.20); Upgrade netgear r6020_firmware to a higher version than 1.0.0.26,and avoid the version (,1.0.0.26); Upgrade netgear r6080_firmware to a higher version than 1.0.0.26,and avoid the version (,1.0.0.26); Upgrade netgear r6100_firmware to a higher version than 1.0.1.20,and avoid the version (,1.0.1.20); Upgrade netgear r6250_firmware to a higher version than 1.0.4.16,and avoid the version (,1.0.4.16); Upgrade netgear r6300_firmware to a higher version than 1.0.4.18,and avoid the version (,1.0.4.18); Upgrade netgear r6400_firmware to a higher version than 1.0.1.32,1.0.2.46,and avoid the version (,1.0.1.32),(,1.0.2.46); Upgrade netgear r6700_firmware to a higher version than 1.0.1.36,1.2.0.12,and avoid the version (,1.0.1.36),(,1.2.0.12); Upgrade netgear r6800_firmware to a higher version than 1.2.0.12,and avoid the version (,1.2.0.12); Upgrade netgear r6900_firmware to a higher version than 1.2.0.12,1.0.1.34,and avoid the version (,1.2.0.12),(,1.0.1.34); Upgrade netgear r6900p_firmware to a higher version than 1.3.0.8,and avoid the version (,1.3.0.8); Upgrade netgear r7000_firmware to a higher version than 1.0.9.18,and avoid the version (,1.0.9.18); Upgrade netgear r7000p_firmware to a higher version than 1.3.0.8,and avoid the version (,1.3.0.8); Upgrade netgear r7100lg_firmware to a higher version than 1.0.0.34,and avoid the version (,1.0.0.34); Upgrade netgear r7300dst_firmware to a higher version than 1.0.0.58,and avoid the version (,1.0.0.58); Upgrade netgear r7500_firmware to a higher version than 1.0.0.118,1.0.3.24,and avoid the version (,1.0.0.118),(,1.0.3.24); Upgrade netgear r7800_firmware to a higher version than 1.0.2.40,and avoid the version (,1.0.2.40); Upgrade netgear r7900_firmware to a higher version than 1.0.2.4,and avoid the version (,1.0.2.4); Upgrade netgear r7900p_firmware to a higher version than 1.1.5.14,and avoid the version (,1.1.5.14); Upgrade netgear r8000_firmware to a higher version than 1.0.4.4,and avoid the version (,1.0.4.4); Upgrade netgear r8000p_firmware to a higher version than 1.1.5.14,and avoid the version (,1.1.5.14); Upgrade netgear r8500_firmware to a higher version than 1.0.2.110,and avoid the version (,1.0.2.110); Upgrade netgear r8300_firmware to a higher version than 1.0.2.110,and avoid the version (,1.0.2.110); Upgrade netgear r9000_firmware to a higher version than 1.0.2.52,and avoid the version (,1.0.2.52); Upgrade netgear wn2000rpt_firmware to a higher version than 1.0.1.8,and avoid the version (,1.0.1.8); Upgrade netgear wn3000rp_firmware to a higher version than 1.0.2.50,and avoid the version (,1.0.2.50); Upgrade netgear wn3100rp_firmware to a higher version than 1.0.0.42,and avoid the version (,1.0.0.42); Upgrade netgear wndr3400_firmware to a higher version than 1.0.1.16,and avoid the version (,1.0.1.16); Upgrade netgear wndr3700_firmware to a higher version than 1.0.2.94,and avoid the version (,1.0.2.94); Upgrade netgear wndr4300_firmware to a higher version than 1.0.2.96,1.0.0.50,and avoid the version (,1.0.2.96),(,1.0.0.50); Upgrade netgear wndr4500_firmware to a higher version than 1.0.0.50,and avoid the version (,1.0.0.50); Upgrade netgear wnr1000_firmware to a higher version than 1.1.0.44,and avoid the version (,1.1.0.44); Upgrade netgear wnr2000_firmware to a higher version than 1.0.0.62,and avoid the version (,1.0.0.62); Upgrade netgear wnr2020_firmware to a higher version than 1.1.0.44,and avoid the version (,1.1.0.44); Upgrade netgear wnr2050_firmware to a higher version than 1.1.0.44,and avoid the version (,1.1.0.44); Upgrade netgear wnr3500l_firmware to a higher version than 1.2.0.46,and avoid the version (,1.2.0.46)