Eagle Eye Networks

Netgear Router Vulnerability

December 13, 2016 Eagle Eye Networks

NetGear-transparent

Netgear R7000 and R6400 routers, and maybe other ones too (see list below) were discovered to have a severe vulnerability on Dec 9, 2016.

Netgear responded within 3 days with a new firmware to solve the problem. Good work on their part.

But if you don’t patch and upgrade it is really quite easy to lose to control of your router and grant bad actors total access to your network and router. You will then be subject to a whole list of issues that may be really difficult to clean up.

Here is the CERN posting that details the vulnerability:
https://www.kb.cert.org/vuls/id/582384

Here is an article with additional details:
https://securityledger.com/2016/12/vulnerability-prompts-warning-stop-using-netgear-wifi-routers/

Calypso Pink indicates all of these Netgear routers are vulnerable:
https://kalypto.org/research/netgear-vulnerability-expanded/

NetGear AC1750-Smart WiFi Router (Model R6400) NetGear AC1900-Nighthawk Smart WiFi Router (Model R7000) NetGear AC2300-Nighthawk Smart WiFi Router with MU-MIMO (Model R7000P) NetGear AC2350-Nighthawk X4 AC 2350 Dual Band WiFi Router (Model R7500) NetGear AC2600-Nighthawk X4S Smart WiFi Gaming Router (Model R7800) NetGear AC3200-Nighthawk AC3200 Tri-Band WiFi Router (Model R8000) NetGear AC5300-AC5300 Nighthawk X8 Tri-Band WiFi Router (Model R8500) NetGear AD7200-Nighthawk X10 Smart WiFi Router (R9000)

netgear1450x1214

Other posts that might interest you

loading

Log4j Security Update

On Friday, Dec. 10, 2021 the Apache Software Foundation disclosed a critical vulnerability (CVE-2021-44228) in its “Log4j” software. The disclosure has received extensive news coverage because of the ubiquity of…

December 13, 2021 Phillip Farr

The Dangers of Connecting Cameras Directly to the Internet

Dean Drako Dean Drako is the founder and CEO of Eagle Eye Networks, the global leader in cloud video security. Eagle Eye Networks ranked #133 in Deloitte’s 2019 Technology Fast…

March 18, 2020 Eagle Eye Networks

Macy’s Hit in Cyber Data Breach

Macy's and Bloomingdales join a long list of retailers hit with cyber breaches this year, including Adidas, Under Armour, Forever21, Saks Fifth Avenue and Lord & Taylor. In a notice…

August 3, 2018 Eagle Eye Networks