Netgear WiFi Routers Receive Update For Critical Vulnerability

Netgear has fixed a high-severity vulnerability affecting multiple WiFi router models and advised customers to update their devices to the latest available firmware as soon as possible. The flaw impacts multiple Wireless AC Nighthawk, Wireless AX Nighthawk (WiFi 6), and Wireless AC router models.

Netgear has not released any details on what mechanism(s) allow the abuse of this flaw, just that the vulnerability is a pre-authentication buffer overflow vulnerability. Buffer overflows can lead to denial-of-service, arbitrary command execution, and other malicious activity.

The affected devices and patched firmware versions are as follows:

Analyst Notes

Users of the above Netgear devices should update their firmware as soon as possible. Netgear support documentation provides update instructions for affected users:

1. Visit NETGEAR Support: https://www.netgear.com/support/
2. Start typing your model number in the search box, then select your model from the drop-down menu as soon as it appears.
3. If you do not see a drop-down menu, make sure that you entered your model number correctly, or select a product category to browse for your product model.
4. Click Downloads.
5. Under Current Versions, select the download whose title begins with Firmware Version.
6. Click Download.
7. Follow the instructions in your product’s user manual, firmware release notes, or product support page to install the new firmware.

https://www.bleepingcomputer.com/news/security/netgear-warns-users-to-patch-recently-fixed-wifi-router-bug/