Eagle Eye Networks

Netgear Router Vulnerability

December 13, 2016 Eagle Eye Networks

NetGear-transparent

Netgear R7000 and R6400 routers, and maybe other ones too (see list below) were discovered to have a severe vulnerability on Dec 9, 2016.

Netgear responded within 3 days with a new firmware to solve the problem. Good work on their part.

But if you don’t patch and upgrade it is really quite easy to lose to control of your router and grant bad actors total access to your network and router. You will then be subject to a whole list of issues that may be really difficult to clean up.

Here is the CERN posting that details the vulnerability:
https://www.kb.cert.org/vuls/id/582384

Here is an article with additional details:
https://securityledger.com/2016/12/vulnerability-prompts-warning-stop-using-netgear-wifi-routers/

Calypso Pink indicates all of these Netgear routers are vulnerable:
https://kalypto.org/research/netgear-vulnerability-expanded/

NetGear AC1750-Smart WiFi Router (Model R6400) NetGear AC1900-Nighthawk Smart WiFi Router (Model R7000) NetGear AC2300-Nighthawk Smart WiFi Router with MU-MIMO (Model R7000P) NetGear AC2350-Nighthawk X4 AC 2350 Dual Band WiFi Router (Model R7500) NetGear AC2600-Nighthawk X4S Smart WiFi Gaming Router (Model R7800) NetGear AC3200-Nighthawk AC3200 Tri-Band WiFi Router (Model R8000) NetGear AC5300-AC5300 Nighthawk X8 Tri-Band WiFi Router (Model R8500) NetGear AD7200-Nighthawk X10 Smart WiFi Router (R9000)

netgear1450x1214

Tags

Other posts that might interest you

loading

How to spot and defeat a real-world phishing attack

Email security and phishing attempts are a constant battle. The strategy of the attacks is the same. Typically the email is trying to entice the recipient into clicking on something…

May 10, 2024 drako

SamSam Ransomare

The SamSam ransomware virus hit the Colorado Department of Transportation for the second time. In the first attack detected on February 21, 2018, over 2,000 computers running Windows and McAfee…

March 16, 2018 Eagle Eye Networks

WannaCry Ransomware Update

The WannaCry ransomware virus recently infected 160 computers in 11 different Connecticut government agencies, according to the state's CIO. The WannaCry ransomware virus infects computers by scrambling its data before…

March 7, 2018 Eagle Eye Networks