Netgear has fixed a high-severity vulnerability affecting several models of Wi-Fi routers and advised customers to update their devices to the latest available firmware as soon as possible.
Although Netgear did not disclose any information about the component affected by this bug or its impact, it did state that it is a pre-authentication buffer overflow vulnerability.
Attackers can exploit this flaw in low complexity attacks without requiring permissions or user interaction.
In a security advisory released Wednesday, Netgear said it “strongly recommends downloading the latest firmware as soon as possible.”
The list of vulnerable routers and patched firmware versions can be found in the table below.
|Vulnerable Netgear Router||Firmware version patched|
|RAX40||Firmware Version 126.96.36.199|
|RAX35||Firmware Version 188.8.131.52|
|R6400v2||Firmware version 184.108.40.206|
|R6700v3||Firmware version 220.127.116.11|
|R6900P||Firmware version 18.104.22.168|
|R7000P||Firmware version 22.214.171.124|
|R7000P||Firmware version 126.96.36.199|
|R7960P||Firmware Version 188.8.131.52|
|R8000P||Firmware Version 184.108.40.206|
How to Update Your Router Firmware
To download and install the latest firmware for your Netgear router, you need to follow these steps:
- Visit NETGEAR Support.
- Start typing your model number in the search box, then select your model from the drop-down menu when it appears.
- If you don’t see a drop-down menu, make sure you entered your model number correctly or select a product category to find your product model.
- Click on Downloads.
- Under Current releasesselect the first download whose title begins with Firmware version.
- Click on Release Notes.
- Follow the instructions in the firmware release notes to download and install the new firmware.
“The pre-authentication buffer overflow vulnerability persists if you do not follow all recommended steps,” Netgear also warned.
“NETGEAR is not responsible for consequences that could have been avoided by following the recommendations of this notification.”
A Netgear spokesperson was not immediately available for comment when contacted by BleepingComputer earlier today for more information.
Wednesday, Netgear urged customers to address a second vulnerability that can be exploited to trigger a denial of service state in attacks targeting Wireless AC Nighthawk and Wireless AX Nighthawk (WiFi 6) routers.
Earlier this year, Netgear also fix bad Orbi firmware update which prevented customers from accessing the admin consoles of their devices.