CVE:CVE-2017-11589
CNNVD:CNNVD-201707-1046
Cisco DDR2200 ADSL2+ Residential Gateway和DDR2201v1 ADSL2+ Residential Gateway都是美国思科（Cisco）公司的家用无线网关设备。
Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E和DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3设备中存在身份验证绕过漏洞，该漏洞源于程序缺少访问控制。攻击者可利用该漏洞获取页面的访问权限。
solution:Upgrade cisco residential_gateway_firmware to a higher version than ddr2200b-na-annexa-fcc-v00.00.03.45.4e,ddr2201v1-na-annexa-fcc-v00.00.03.28.3,and avoid the version ddr2200b-na-annexa-fcc-v00.00.03.45.4e,ddr2201v1-na-annexa-fcc-v00.00.03.28.3