Netgear WiFi Routers Receive Update For Critical Vulnerability - Binary Defense

Threat Watch

Threat Watch Netgear WiFi Routers Receive Update For Critical Vulnerability

Netgear WiFi Routers Receive Update For Critical Vulnerability

Netgear has fixed a high-severity vulnerability affecting multiple WiFi router models and advised customers to update their devices to the latest available firmware as soon as possible. The flaw impacts multiple Wireless AC Nighthawk, Wireless AX Nighthawk (WiFi 6), and Wireless AC router models.

Netgear has not released any details on what mechanism(s) allow the abuse of this flaw, just that the vulnerability is a pre-authentication buffer overflow vulnerability. Buffer overflows can lead to denial-of-service, arbitrary command execution, and other malicious activity.

The affected devices and patched firmware versions are as follows:

Vulnerable Netgear router	Patched firmware version
RAX40	Firmware version 1.0.2.60
RAX35	Firmware version 1.0.2.60
R6400v2	Firmware version 1.0.4.122
R6700v3	Firmware version 1.0.4.122
R6900P	Firmware version 1.3.3.152
R7000P	Firmware version 1.3.3.152
R7000P	Firmware version 1.0.11.136
R7960P	Firmware version 1.4.4.94
R8000P	Firmware version 1.4.4.94

ANALYST NOTES

Users of the above Netgear devices should update their firmware as soon as possible. Netgear support documentation provides update instructions for affected users:

1. Visit NETGEAR Support: https://www.netgear.com/support/
2. Start typing your model number in the search box, then select your model from the drop-down menu as soon as it appears.
3. If you do not see a drop-down menu, make sure that you entered your model number correctly, or select a product category to browse for your product model.
4. Click Downloads.
5. Under Current Versions, select the download whose title begins with Firmware Version.
6. Click Download.
7. Follow the instructions in your product’s user manual, firmware release notes, or product support page to install the new firmware.

https://www.bleepingcomputer.com/news/security/netgear-warns-users-to-patch-recently-fixed-wifi-router-bug/