netgear d3600_firmware 在web页面生成时对输入的转义处理不恰当（跨站脚本）
CVE编号
CVE-2017-18785利用情况
暂无补丁情况
N/A披露时间
2020-04-23漏洞描述
NETGEAR WNR3500L等都是美国网件（NETGEAR）公司的产品。WNR3500L是一款无线路由器。NETGEAR R6400是一款无线路由器。NETGEAR D6200是一款无线调制解调器。 多款NETGEAR产品中存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证，攻击者可利用该漏洞执行客户端代码。解决建议
厂商已发布了漏洞修复程序，请及时关注更新：https://kb.netgear.com/000049534/Security-Advisory-for-Cross-Site-Scripting-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2950
参考链接 |
|
|---|---|
| https://kb.netgear.com/000049534/Security-Advisory-for-Cross-Site-Scripting-o... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | netgear | d3600_firmware | * | Up to (excluding) 1.0.0.67 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | d6000_firmware | * | Up to (excluding) 1.0.0.67 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | d6100_firmware | * | Up to (excluding) 1.0.0.56 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | d6200_firmware | * | Up to (excluding) 1.1.00.24 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | d6220_firmware | * | Up to (excluding) 1.0.0.32 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | d6400_firmware | * | Up to (excluding) 1.0.0.66 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | d7000_firmware | * | Up to (excluding) 1.0.0.44 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | d7000_firmware | * | Up to (excluding) 1.0.1.52 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | d7800_firmware | * | Up to (excluding) 1.0.1.30 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | d8500_firmware | * | Up to (excluding) 1.0.3.35 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | dgn2200b_firmware | * | Up to (excluding) 1.0.0.96 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | dgn2200_firmware | * | Up to (excluding) 1.0.0.96 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ex2700_firmware | * | Up to (excluding) 1.0.1.28 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ex6100_firmware | * | Up to (excluding) 1.0.1.54 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ex6150_firmware | * | Up to (excluding) 1.0.1.54 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ex6200_firmware | * | Up to (excluding) 1.0.1.52 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ex6400_firmware | * | Up to (excluding) 1.0.1.72 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ex7300_firmware | * | Up to (excluding) 1.0.1.72 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ex8000_firmware | * | Up to (excluding) 1.0.0.102 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | jnr1010_firmware | * | Up to (excluding) 1.1.0.44 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | jwnr2010_firmware | * | Up to (excluding) 1.1.0.44 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | pr2000_firmware | * | Up to (excluding) 1.0.0.20 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6020_firmware | * | Up to (excluding) 1.0.0.26 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6080_firmware | * | Up to (excluding) 1.0.0.26 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6100_firmware | * | Up to (excluding) 1.0.1.20 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6250_firmware | * | Up to (excluding) 1.0.4.16 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6300_firmware | * | Up to (excluding) 1.0.4.18 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6400_firmware | * | Up to (excluding) 1.0.1.32 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6400_firmware | * | Up to (excluding) 1.0.2.46 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6700_firmware | * | Up to (excluding) 1.0.1.36 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6700_firmware | * | Up to (excluding) 1.2.0.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6800_firmware | * | Up to (excluding) 1.2.0.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6900p_firmware | * | Up to (excluding) 1.3.0.8 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6900_firmware | * | Up to (excluding) 1.0.1.34 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6900_firmware | * | Up to (excluding) 1.2.0.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7000p_firmware | * | Up to (excluding) 1.3.0.8 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7000_firmware | * | Up to (excluding) 1.0.9.18 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7100lg_firmware | * | Up to (excluding) 1.0.0.34 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7300dst_firmware | * | Up to (excluding) 1.0.0.58 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7500_firmware | * | Up to (excluding) 1.0.0.118 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7500_firmware | * | Up to (excluding) 1.0.3.24 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7800_firmware | * | Up to (excluding) 1.0.2.40 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7900p_firmware | * | Up to (excluding) 1.1.5.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7900_firmware | * | Up to (excluding) 1.0.2.4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8000p_firmware | * | Up to (excluding) 1.1.5.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8000_firmware | * | Up to (excluding) 1.0.4.4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8300_firmware | * | Up to (excluding) 1.0.2.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8500_firmware | * | Up to (excluding) 1.0.2.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r9000_firmware | * | Up to (excluding) 1.0.2.52 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wn2000rpt_firmware | * | Up to (excluding) 1.0.1.8 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wn3000rp_firmware | * | Up to (excluding) 1.0.2.50 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wn3100rp_firmware | * | Up to (excluding) 1.0.0.42 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wndr3400_firmware | * | Up to (excluding) 1.0.1.16 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wndr3700_firmware | * | Up to (excluding) 1.0.2.94 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wndr4300_firmware | * | Up to (excluding) 1.0.0.50 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wndr4300_firmware | * | Up to (excluding) 1.0.2.96 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wndr4500_firmware | * | Up to (excluding) 1.0.0.50 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wnr1000_firmware | * | Up to (excluding) 1.1.0.44 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wnr2000_firmware | * | Up to (excluding) 1.0.0.62 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wnr2020_firmware | * | Up to (excluding) 1.1.0.44 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wnr2050_firmware | * | Up to (excluding) 1.1.0.44 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | wnr3500l_firmware | * | Up to (excluding) 1.2.0.46 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d3600 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d6000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d6100 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d6200 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d6220 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d6400 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d7000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d7000 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d7800 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | d8500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | dgn2200 | v4 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | dgn2200b | v4 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ex2700 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ex6100 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ex6150 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ex6200 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ex6400 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ex7300 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ex8000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | jnr1010 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | jwnr2010 | v5 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | pr2000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6020 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6080 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6100 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6250 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6300 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6400 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6400 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6700 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6700 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6800 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6900 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6900 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6900p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7000p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7100lg | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7300dst | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7500 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7800 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7900 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7900p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8000p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8300 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r9000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wn2000rpt | v3 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wn3000rp | v3 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wn3100rp | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wndr3400 | v3 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wndr3700 | v4 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wndr4300 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wndr4300 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wndr4500 | v3 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wnr1000 | v4 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wnr2000 | v5 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wnr2020 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wnr2050 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | wnr3500l | v2 | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 高
- 影响范围 已更改
- 用户交互 需要
- 可用性 无
- 保密性 低
- 完整性 低
| CWE-ID | 漏洞类型 |
| CWE-79 | 在Web页面生成时对输入的转义处理不恰当（跨站脚本） |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论