You should probably update your Netgear router ASAP

Daniel Sims

Posts: 824   +33
What just happened? Users often overlook Wi-Fi routers when it comes to security, a mistake that can lead to intrusions, snooping, and other kinds of attacks from malicious actors. Fortunately, Netgear has been on top of things recently with an extensive list of models and firmware versions affected by recently-discovered vulnerabilities.

Owners of Netgear routers including Orbi systems and several Nighthawk models should check if their firmware is the latest version available as soon as possible. The company issued two dozen security alerts in a single day this week, warning users about a wide range of patched vulnerabilities affecting many different router models, range extenders, and Wi-Fi systems.

Netgear doesn't offer detailed information on how attackers exploit the vulnerabilities it patched, but the company's alerts label the nature of each one. Their level of severity ranges between medium, high, and critical.

Two of the alerts involve pre-authentication buffer overflow vulnerabilities. Bleeping Computer writes that successful pre-authentication buffer overflow attacks could result in crashes or arbitrary code execution. They're potentially dangerous because they don't involve tricking a router's owner into doing anything. Netgear lists one of these vulnerabilities as high-priority.

Almost half of Netgear's alerts from this week are for post-authentication command injection vulnerabilities. These require an attacker to gain authentication to enter the system but could let them execute root-level commands once they're in.

The other vulnerabilities could allow authentication bypass, denial of service attacks, and could leak sensitive information. One alert is for security misconfiguration. Netgear rates at least one alert as critical.

In each alert, Netgear has a list of affected firmware versions and devices large enough that just about anyone with recent Netgear equipment should check their firmware. The right side of each page also includes directions for checking each product's model number.

The easiest way to update a Netgear device's firmware is through one of the company's mobile apps: the Nighthawk app for Nighthawk products, the Orbi app for Orbi systems, and the Insight app for some business devices.

To update firmware over the web, head to the Netgear support page. Start typing your model number and a drop-down list should appear. Click on your model number if it appears in the list, then click "downloads." Under "Current Versions," click on the download with a title beginning with "Firmware Version," then click "Download." Netgear also includes directions in product manuals, product support pages, and firmware release notes.

Permalink to story.



Posts: 2,770   +2,616
Thank god I ditched Netgear routers years ago. I do own a retired R7000 but it was running asus merlin firmware so would not be affected by this if I still had it in service.


Posts: 232   +138
Maybe its time to head back to the drawingboard, make a simple thus secure interface to manage any router with.


Posts: 118   +114
Since 2007 I have been running the German brand AVM Fritz!Box routers, they never/rarely had bugs, and they never need to be restarted to fix internet issues.


Posts: 426   +179
Since 2007 I have been running the German brand AVM Fritz!Box routers, they never/rarely had bugs, and they never need to be restarted to fix internet issues.
Yeah I used to have a 7490 on 1 gigE fiber but when I updated to 2/2 gigE I had to use a Zyxel 7501 router which also seems to fine so far


Posts: 883   +897
Netgear - great hardware, truly awful firmware/software. I had an R7000 and it was fast but crashed every few hours. Hundreds of people on the forums complaining about it and they just kept releasing new firmware that made it worse and worse. People would spend hours trying to get really old versions into some shape where they might go a whole day without falling over.

Remind me of Asus, whose software is so bad I can't believe nobody mentions it in the reviews of their motherboards. People spend a fortune on RAM etc to get that extra 1 or 2 percent performance, then Armory Crate, AI Suite and Aura come along and takes a huge steaming dump on your processor.
Sorry - getting off topic - just needed to get that off my chest!