CVE:CVE-2017-18703
CNNVD:CNNVD-202004-2123
NETGEAR EX6150等都是美国网件（NETGEAR）公司的产品。NETGEAR EX6150是一款无线网络信号扩展器。NETGEAR D7000是一款无线调制解调器。NETGEAR WNDR3700是一款无线路由器。
多款NETGEAR产品中存在跨站请求伪造漏洞。该漏洞源于WEB应用未充分验证请求是否来自可信用户。攻击者可利用该漏洞通过受影响客户端向服务器发送非预期的请求。以下产品及版本受到影响：NETGEAR D1500 1.0.0.25之前版本；D500 1.0.0.25之前版本；D6100 1.0.0.55之前版本；D7000 1.0.1.50之前版本；D7800 1.0.1.28之前版本；EX6100v2 1.0.1.60之前版本；EX6150v2 1.0.1.60之前版本；JNR1010v2 1.1.0.46之前版本；JR6150 1.0.1.16之前版本；JWNR2010v5 1.1.0.46之前版本；PR2000 1.0.0.18之前版本；R6020 1.0.0.26之前版本；R6050 1.0.1.16之前版本；R6080 1.0.0.26之前版本；R6100 1.0.1.20之前版本；R6220 1.1.0.60之前版本；R7500 1.0.0.118之前版本；R7500v2 1.0.3.20之前版本；R7800 1.0.2.40之前版本；R9000 1.0.2.52之前版本；WN3000RPv3 1.0.2.50之前版本；WN3100RPv2 1.0.0.40之前版本；WNDR3700v5 1.1.0.48之前版本；WNDR4300v2 1.0.0.48之前版本；WNDR4500v3 1.0.0.48之前版本；WNR1000v4 1.1.0.46之前版本；WNR2000v5 1.0.0.62之前版本；WNR2020 1.1.0.46之前版本；WNR2050 1.1.0.46之前版本。
solution:Upgrade netgear d1500_firmware to a higher version than 1.0.0.25,and avoid the version (,1.0.0.25); Upgrade netgear d500_firmware to a higher version than 1.0.0.25,and avoid the version (,1.0.0.25); Upgrade netgear d6100_firmware to a higher version than 1.0.0.55,and avoid the version (,1.0.0.55); Upgrade netgear d7000_firmware to a higher version than 1.0.1.50,and avoid the version (,1.0.1.50); Upgrade netgear d7800_firmware to a higher version than 1.0.1.28,and avoid the version (,1.0.1.28); Upgrade netgear ex6100_firmware to a higher version than 1.0.1.60,and avoid the version (,1.0.1.60); Upgrade netgear ex6150_firmware to a higher version than 1.0.1.60,and avoid the version (,1.0.1.60); Upgrade netgear jnr1010_firmware to a higher version than 1.1.0.46,and avoid the version (,1.1.0.46); Upgrade netgear jr6150_firmware to a higher version than 1.0.1.16,and avoid the version (,1.0.1.16); Upgrade netgear jwnr2010_firmware to a higher version than 1.1.0.46,and avoid the version (,1.1.0.46); Upgrade netgear pr2000_firmware to a higher version than 1.0.0.18,and avoid the version (,1.0.0.18); Upgrade netgear r6020_firmware to a higher version than 1.0.0.26,and avoid the version (,1.0.0.26); Upgrade netgear r6050_firmware to a higher version than 1.0.1.16,and avoid the version (,1.0.1.16); Upgrade netgear r6080_firmware to a higher version than 1.0.0.26,and avoid the version (,1.0.0.26); Upgrade netgear r6100_firmware to a higher version than 1.0.1.20,and avoid the version (,1.0.1.20); Upgrade netgear r6220_firmware to a higher version than 1.1.0.60,and avoid the version (,1.1.0.60); Upgrade netgear r7500_firmware to a higher version than 1.0.0.118,1.0.3.20,and avoid the version (,1.0.0.118),(,1.0.3.20); Upgrade netgear r7800_firmware to a higher version than 1.0.2.40,and avoid the version (,1.0.2.40); Upgrade netgear r9000_firmware to a higher version than 1.0.2.52,and avoid the version (,1.0.2.52); Upgrade netgear wn3000rp_firmware to a higher version than 1.0.2.50,and avoid the version (,1.0.2.50); Upgrade netgear wn3100rp_firmware to a higher version than 1.0.0.40,and avoid the version (,1.0.0.40); Upgrade netgear wndr3700_firmware to a higher version than 1.1.0.48,and avoid the version (,1.1.0.48); Upgrade netgear wndr4300_firmware to a higher version than 1.0.0.48,and avoid the version (,1.0.0.48); Upgrade netgear wndr4500_firmware to a higher version than 1.1.0.48,and avoid the version (,1.1.0.48); Upgrade netgear wnr1000_firmware to a higher version than 1.1.0.46,and avoid the version (,1.1.0.46); Upgrade netgear wnr2000_firmware to a higher version than 1.0.0.62,and avoid the version (,1.0.0.62); Upgrade netgear wnr2020_firmware to a higher version than 1.1.0.46,and avoid the version (,1.1.0.46); Upgrade netgear wnr2050_firmware to a higher version than 1.1.0.46,and avoid the version (,1.1.0.46)