IT Security: Netgear admits its routers are vulnerable to remote attacks

Share This

Out of the 11 vulnerable routers, only five have been patched.

Several Netgear routers, including some of most popular models on Amazon, have been vulnerable to remote attacks for months. According to Wired, a security researcher named Andrew Rollins discovered the flaw and notified the company about it way back on August 25th but didn’t get a reply. He went public with the information after waiting for over three months, prompting Homeland Security to issue a warning a few days ago. Now, the company has finally admitted that it’s aware of the problem, named all the affected devices and released patches for some of them.

Based on Netgear’s announcement, there are 11 affected devices.

R6250*
R6400*
R6700*
R6900
R7000*
R7100LG
R7300
R7900
R8000*
D6220
D7000

The company already issued patches for the R6250, R6400, R6700, R7000 and R8000, but you’ll have to install them manually since Netgear doesn’t have a means to push an over-the-air update. It’s unclear why the company isn’t done putting patches together for the other models — Rollins told Wired that it’s making Netgear look incompetent as the flaw is “not that hard to fix at all.”

In case you’re using any of the models that has yet to be patched, you may want to take Homeland Security’s advice. The flaw is pretty easy to exploit, after all, and a hacker could easily take control of your computers to make them part of a botnet. DHS pointed to a blog post by computer science researcher Bas van Schaik for a temporary fix, though it mentioned a much easier option you can take: stop using your router until a patch is available.