Skip to main content

It may be time to turn off your router: Netgear confirms security vulnerability

Netgear Nighthawk R7000
Image used with permission by copyright holder
A serious security vulnerability affecting a number of Netgear brand routers surfaced Friday, and it reportedly could allow hackers to seize control of your home or office network and potentially intercept your sensitive data. The vulnerability was confirmed by CERT, a federally funded service that coordinates the response to serious software vulnerabilities, reports Ars Technica.

Netgear later confirmed the vulnerability was present in its R8000, R7000, and R6400 routers, but has not yet confirmed whether or not the R7000P, R7500, R7800, R8500, or R9000 models are also affected. According to the CERT report, users of any of the aforementioned routers should be cautious and should probably stop using the devices until a patch has been released.

The vulnerability is particularly insidious because of how simple it is to execute. According to Ars, the only thing you have to do as a user is to click on a malicious link, which can be easily disguised as something innocuous. The link then serves a set of instructions to your router, which will run the commands as a root user, allowing the malicious instructions to subvert your router’s security.

Even if your router’s remote management is disabled, or is otherwise insulated from the internet, the commands will still be run by vulnerable routers, giving malicious third parties access to your local network and all the traffic that passes through it. Ars originally reported a temporary workaround that would protect you from the exploit, and the vulnerability was so severe that the best bet was to just switch it off and keep an eye on the Netgear security advisories for this particular exploit.

Fortunately, Netgear has now responded with a firmware update for the affected routers, either a production update or a beta update. It’s highly recommended that you click on your Netgear router from the list below to download the new firmware:

Netgear recommends in the strongest terms that you update your router. Download and install the beta software now, and then make sure to update to the production firmware when it’s available. Keep an eye on the Security Advisory page for vulnerability 582384 to see if any other Netgear routers are added to the list or if further updates are provided for the known vulnerable devices.

Updated on 12-19-2016 by Mark Coppock: Add download links for production and beta firmware for the affected Netgear routers.

Editors' Recommendations

Jayce Wagner
Former Digital Trends Contributor
A staff writer for the Computing section, Jayce covers a little bit of everything -- hardware, gaming, and occasionally VR.
Power up your tech game this summer with Dell’s top deals: Upgrade for a bargain
Dell Techfest and best tech on sale featured.

One of the best times to upgrade your tech stack, be it your desktop, a new laptop, or some high-resolution monitors, is when great deals are to be had. Well, I'm here to share that thanks to Dell's top deals, you can power up your tech game and have most of the summer to make it happen. Maybe you're happy with your current system or setup. That's excellent, but you're likely considering upgrading somewhere, and that's precisely what these deals are all about. Dell has a smorgasbord of deals on laptops, desktops, gaming desktops, monitors, accessories, and so much more. We'll call out a few of our favorite deals below, but for now, know that you should be shopping this sale if you're interested in anything tech-related.

 
What summer tech should you buy in Dell's top deals?

Read more
I love the MacBook Pro, but this Windows laptop came surprisingly close
Apple MacBook Pro 16 downward view showing keyboard and speaker.

There are some great machines in the 15-inch laptop category, which has recently been stretched to include the more common 16-inch laptop. The best among them is the Apple MacBook Pro 16, which offers fast performance for tasks like video editing and the longest battery life.

The Lenovo Yoga Pro 9i 16 is aimed not only at other 16-inch Windows laptops but also at the MacBook Pro 16. It offers many of the same benefits but at a lower price. Can it take a place at the top?
Specs and configurations

Read more
How to set an ‘Out of Office’ message in Microsoft Teams
Person using Windows 11 laptop on their lap by the window.

Many people use Microsoft Teams regularly to communicate with colleagues both inside of the office and remotely. It is considered one of the most efficient ways to ensure you can stay in contact with the people on your team, but what if you need to let people know you’re not readily available? Microsoft Teams has a method for you to set up an "Out of Office" status for your profile to let staff members know when you’ll be gone for the afternoon, for several days on vacation, or for an extended period.
Where do I go to set up my ‘Out of Office’ status for Teams?
It is important to note that your Microsoft Teams and Outlook calendars are synced. This includes your out-of-office status and automatic replies. So, whatever you set up in Microsoft Teams will reflect in Outlook. Similarly, you can set up your out-of-office status in Outlook, and it will be reflected in Teams; however, the former has a more straightforward instruction.

First, you can click on your profile icon in Teams and go directly to Schedule an out of office, as a shortcut. This will take you to the settings area where you can proceed. You can also click the three-dot icon next to your profile icon, then go to Settings > General, then scroll down to the bottom of the page. There, you'll find out-of-office settings and click Schedule.

Read more