Blog Layout

Some Netgear Devices May Have Vulnerabilities According To Microsoft

sccomputerguys • Jul 15, 2021

Do you use a Netgear DGN router, either at home or in your office? If so, be aware that Microsoft has discovered a number of security flaws that impact those devices, if they are running a firmware version older than V1.0.0.60.

Those vulnerabilities give attackers access to an unpatched router's management page, which can be used to bypass whatever network security you may have in place and allow the attackers to derive saved router credentials via an accompanying side-channel attack.

In all, Microsoft unearthed three different security flaws, all rated serious to critical. If there's a silver lining to be found in the discovery, it lies in the fact that Netgear has a fantastic track record when it comes to responding to discoveries like these. In fact, the company has already issued a patch for the firmware which addresses all three.

If you've already checked, and you've confirmed that you're running a vulnerable version of the firmware, to get the patch, just head to Netgear's support page. Once you're there, start typing in the model number of your router in the search box on that page and a drop down list will appear with the company's routers most likely to match what you're typing.

When you see your model number, click it and it will direct you to the page for that model. If you happen not to see a drop down box, you may not have entered your model number correctly, or selected a product category.

In any case, once you've located your model and made your way to that page, you'll see a "Downloads" link.

Click that and look for "Current Versions." Beneath that, you'll find a listing of firmware versions. Simply select the latest one available, download and install.

Kudos to Microsoft for their sharp eyes in spotting the trouble, and to Netflix for responding so quickly. Be safe out there.

By sccomputerguys 22 Jul, 2022
Do you own one or more of the following products made by Cisco? The RV110W Wireless-N VPN Firewall The RV130 VPN Router The RV130W Wireless-N Multifunction VPN Router The RV215W Wireless-N VPN ...
By sccomputerguys 21 Jul, 2022
Do you use Microsoft Teams?  If so, you'll be thrilled to know that the Redmond Giant is continuing to pour resources into improving the software with a specific focus on audio and ...
By sccomputerguys 20 Jul, 2022
Corporate branding can be worth its weight in gold and certain images are absolutely iconic.  The Golden Arches, the Nike "swoosh," and Apple's Apple all come to mind. Logo images give companies ...
By sccomputerguys 19 Jul, 2022
Remember the Heartbleed scare we had a couple years back?  It was a nasty side-channel attack that was somewhat exotic and difficult to pull off, and it was absolutely devastating and sent ...
By sccomputerguys 18 Jul, 2022
Microsoft Exchange servers are once more in the crosshairs of hackers around the world.  Most recently, hacking groups have been specifically targeting them to deploy BlackCat ransomware. As is common among ransomware ...
By sccomputerguys 16 Jul, 2022
If you grew up in the days before the internet, it's absolutely staggering to think of all the ways that mobile technology has changed our lives (and mostly for the better). Remember ...
By sccomputerguys 15 Jul, 2022
It may seem as though Internet Explorer is the browser that will not die, but according to Microsoft, it is now a step closer to breathing its last virtual breath. Microsoft has ...
By sccomputerguys 14 Jul, 2022
If you're involved with IT Security at any level and if your network includes Linux servers, keep a watchful eye out for the new Panchan botnet. It first appeared in the wilds ...
By sccomputerguys 13 Jul, 2022
These days, companies spend significant sums of money to protect themselves from cyber criminals.  The threat matrix is vast, and attacks can come from almost any quarter. That is why many companies ...
By sccomputerguys 12 Jul, 2022
Do you receive healthcare of any kind from Kaiser Permanente?  If so, be aware that they recently published a data breach notification indicating that an unidentified attacker accessed an email account that ...
More Posts
Share by: