Home
 » ISP News » 
Sponsored Links

Security Vulnerabilities Strike 50 Models of Netgear Routers

Saturday, Mar 7th, 2020 (7:31 am) - Score 5,307
netgear nighthark r7000

Once again a mass of almost 50 different models of broadband wireless router(s), WiFi range extenders and gateways from Netgear, including some of their more recent kit (mostly affecting those within the D6000, R6000, R7000, R8000, PR2000, R9000 and XR500 families), have been hit by a string of new security vulnerabilities.

The security risk from these flaws tends to range in severity and the company has already released firmware updates so that customers can patch them ASAP. The first one (PSV-2019-0076) relates to a critical ‘Unauthenticated Remote Code Execution‘ bug on their R7800 router (firmware versions prior to 1.0.2.68).

On top of that the same R7800 model, as well as a mass of other Netgear routers in the D6000, R6000, R7000, R8000, R9000 and XR500 families, are also affected by a ‘Post-Authentication Command Injection‘ (PSV-2018-0352) flaw. The danger level for this one is rated as ‘high’, rather than ‘critical’, for its severity and should also be patched ASAP.

Sadly we’re not finished yet. A ‘Pre-Authentication Command Injection‘ (PSV-2019-0051) flaw was found to affect several models of Netgear router within the R6000 and R7000 families (rated ‘high’ for severity), while a less serious ‘Authentication Bypass‘ (PSV-2018-0570) vulnerability (rated as ‘medium’ for severity) was found to impact various other router and gateway models in the same families, plus a PR2000 and JR6150.

Long story short, if you have any one of the models listed below (credits to Toms Guide) then hop along to the Netgear website and get the latest March 2020 firmware releases. Otherwise you risk your kit and network being broken into by amateur hackers or automated spammers intent upon stealing data, hijacking your computers or all sorts of other malicious things.

Modem/routers:

D6200, D6220, D6400, D7000, D7000v2, D7800, D8500

Range extenders:

PR2000

Routers:

JR6150, R6120, R6220, R6230, R6250, R6260, R6400, R6400v2, R6700, R6700v2, R6700v3, R6800, R6900, R6900P, R6900v2, R7000, R7000P, R7100LG, R7300DST, R7500v2, R7800, R7900, R7900P, R8000, R8000P, R8300, R8500, R8900, R9000, RAX120, RBR20 (Orbi), RBS20 (Orbi), RBK20 (Orbi), RBR40 (Orbi), RBS40 (Orbi), RBK40 (Orbi), RBR50 (Orbi), RBS50 (Orbi), RBK50 (Orbi), XR500, XR700

Share with Twitter
Share with Linkedin
Share with Facebook
Share with Reddit
Share with Pinterest
Mark-Jackson
By Mark Jackson
Mark is a professional technology writer, IT consultant and computer engineer from Dorset (England), he also founded ISPreview in 1999 and enjoys analysing the latest telecoms and broadband developments. Find me on X (Twitter), Mastodon, Facebook and .
Search ISP News
Search ISP Listings
Search ISP Reviews
Comments
5 Responses
  1. Avatar photo Mel says:

    Surprise, surprise, Not!

    1. Avatar photo chris.london says:

      No reason to panic. As far as I can tell these vulnerabilities were mostly patched ages ago. E.g. only XR500s running firmware versions prior to 2.3.2.32 are affected. That firmware is dated 9 July 2018.

    2. Avatar photo Phil says:

      Agree with Chris – just checked my router (d6400) and already running the needed firmware that was release last year.

  2. Avatar photo CarlT says:

    I picked good timing to move the R9000 that was on WAN detail back to access point detail behind a router/firewall.

    1. Avatar photo Steve says:

      If you’ve got a R9000 (or R7800) then I highly recommend using Voxel’s firmware for better performance (these vulnerabilities were fixed yonks ago in Voxel’s fw). Upon request he can also add features which are missing from stock fw.

      http://www.voxel-firmware.com

      Discussion on SNB:

      https://www.snbforums.com/threads/custom-firmware-build-for-r9000-r8900-v-1-0-4-38-1hf.62549/

Comments are closed

Cheap BIG ISPs for 100Mbps+
Community Fibre UK ISP Logo
150Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £26.00
132Mbps
Gift: None
Shell Energy UK ISP Logo
Shell Energy £26.99
109Mbps
Gift: None
Plusnet UK ISP Logo
Plusnet £27.99
145Mbps
Gift: None
Zen Internet UK ISP Logo
Zen Internet £28.00 - 35.00
100Mbps
Gift: None
Large Availability | View All
Cheapest ISPs for 100Mbps+
Gigaclear UK ISP Logo
Gigaclear £17.00
200Mbps
Gift: None
Community Fibre UK ISP Logo
150Mbps
Gift: None
YouFibre UK ISP Logo
YouFibre £19.99
150Mbps
Gift: None
BeFibre UK ISP Logo
BeFibre £21.00
150Mbps
Gift: £25 Love2Shop Card
Hey! Broadband UK ISP Logo
150Mbps
Gift: None
Large Availability | View All
The Top 15 Category Tags
  1. FTTP (5582)
  2. BT (3533)
  3. Politics (2554)
  4. Openreach (2312)
  5. Business (2284)
  6. Building Digital UK (2253)
  7. FTTC (2050)
  8. Mobile Broadband (1991)
  9. Statistics (1800)
  10. 4G (1681)
  11. Virgin Media (1640)
  12. Ofcom Regulation (1473)
  13. Fibre Optic (1406)
  14. Wireless Internet (1401)
  15. FTTH (1382)
Promotion
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms , Privacy and Cookie Policy , Links , Website Rules , Contact
Mastodon