Netgear working on stable fix for a security hole in its routers

Edward Hudson By: Edward Hudson
2 minute read

Home » News » Netgear working on stable fix for a security hole in its routers

Several Netgear routers were exposed to a critical security vulnerability last week, potentially allowing hackers to take control of those devices. The flaw enables code injection tactics by hackers with which they can gain root privileges into Netgear routers.

Netgear released a beta firmware to temporarily plug the security hole, but also admitted that it hadn’t tested the fix yet. Now, the company says that it is working on production firmware to patch the security flaw.

Netgear explains that the production firmware will fix the command injection vulnerability, which lets web pages transmit form input to the command-line interface even without authentication. The company says that it will roll out the production firmware once available.

The company said in a blog post:

While we are working on the production version of the firmware, we are providing a beta version of this firmware release. This beta firmware has not been fully tested and might not work for all users. Netgear is offering this beta firmware release as a temporary solution, but Netgear strongly recommends that all users download the production version of the firmware release as soon as it is available.

The following products now have beta firmware fix available:

  • R6250
  • R6400
  • R6700
  • R6900
  • R7000
  • R7100LG
  • R7300DST
  • R7900
  • R8000
  • D6220
  • D6400

Netgear is still reviewing the extent of the vulnerability to develop fixes for other router models exposed. The company added:

If any other routers are affected by the same security vulnerability, we plan to release firmware to fix those as well…Netgear constantly monitors for both known and unknown threats. Being pro-active rather than re-active to emerging security issues is fundamental for product support at Netgear.

The beta fix offers a better alternative to US CERT’s advisory that recommends turning off affected routers.

While Netgear works on the production firmware, users can check out Netgear’s beta firmware to protect their routers from attackers. The temporary patch is now available to download. If you’ve been affected by the flaw and used the beta firmware, let us know in the comments if it worked.

Read also:

Discussions

Next up

We answer: Where’s the Windows 10 Startup folder?

Matthew Adams By: Matthew Adams
3 minute read

Windows 10’s Task Manager utility includes a Startup tab. That is Windows 10’s default startup manager with which users can disable startup software. However, Task […]

Continue Reading

What to do if Windows was unable to format your pen drive

Aleksandar Ognjanovic By: Aleksandar Ognjanovic
4 minute read

USB flash drives (pen drives, flash sticks) almost completely moved disks out of the picture. They are fast, you can write anything you want whenever […]

Continue Reading

FIX: Oops there was a problem with dictation in Microsoft Office

Aleksandar Ognjanovic By: Aleksandar Ognjanovic
3 minute read

Using speech instead of typing has more than one advantage. Lots of users strongly prefer dictation and, even though it’s still unbrushed feature, it’s getting […]

Continue Reading