Serious Zero-Day Vulnerabilities Found in Netgear Firmware

Security researchers recently disclosed several zero-day vulnerabilities in a number of popular Netgear routers. These Netgear router vulnerabilities could allow malicious actors to take over user networks. While Netgear has begun releasing patches and fixes for the routers users need to be extra careful about who they allow access to their network.

What is a Zero-Day Vulnerability?

According to TechTarget,

A zero-day vulnerability, also known as a computer zero day, is a flaw in software, hardware or firmware that is unknown to the party or parties responsible for patching or otherwise fixing the flaw.

Zero-Day Vulnerability Disclosure for Netgear R6700 Router

In June 2020, researchers at Trend Micro’s Zero Day Initiative (ZDI) issued 10 advisory warnings regarding security vulnerabilities in the Netgear R6700 router. Many of these zero-day vulnerabilities could allow remote code execution on devices and could impact both WAN and LAN on user devices.

ZDI’s purpose is to help researchers identify and report zero-day vulnerabilities to companies. The program financially compensates security researchers and works with companies, like Netgear, to help them fix security vulnerabilities.

Once a vulnerability is reported, ZDI informs companies and gives them 120 days to either patch the vulnerability or provide a mitigation option for users. ZDI also gives companies the option to apply for a temporary extension, if the vendor can provide an adequate reason for the extension.

The Netgear vulnerabilities in question were brought to the company’s attention between November 2019 and February 2020. After Netgear established that it could not provide patches in time, ZDI issued an advisory, calling users to restrict interaction between “trusted machines only.”

Following the disclosure on June 15, Netgear was able to provide patches for some of the vulnerabilities, but many are still yet to be fixed.

Zero-Day Vulnerability Disclosure for 79 Netgear Models

Soon after issuance of the first 10 R6700 advisories, security researchers, including Adam Nichols of cybersecurity firm Grimm and user “d4rkn3ss” from the Vietnam Posts and Telecommunications Group, found that at least one of the vulnerabilities was present in a total of 79 Netgear router models.

The vulnerability in question dealt with the HTTPD daemon, a background program that waits for background server requests. According to the disclosure, the daemon does not adequately check the length of a user server request, allowing malicious users to jam and ultimately take over the router. While this usually can be stopped via the use of a feature called stack cookies or stack canaries, recent versions of popular Netgear routers do not incorporate this feature.

Which Routers are Affected by the Vulnerability?

Since the release of the report, Netgear has been hard at work releasing patches for many of the routers. Users with any of the routers listed above are encouraged to update to the newest firmware. For more information, check Netgear’s specifically created router security advisory page.

What Can Users do to Protect Themselves from Recent Vulnerabilities?

The vulnerabilities mentioned above are all associated with stock router firmware. Very often, stock router firmware is chock full of vulnerabilities and bugs. Upgrading to a router firmware like DD-WRT nullifies these issues. Upgrading your powerful Netgear router with DD-WRT can supercharge your network and avoid the issues associated with stock firmware.

What are the Benefits of DD-WRT?

FlashRouters powered with DD-WRT give users a number of benefits, including upgraded security, more control of their network, and VPN integration. Meaning, users with Netgear routers can avoid worrying about the next story about Netgear router vulnerabilities and take full advantage of all DD-WRT has to offer.

How Can Users Upgrade to DD-WRT?

One of the easiest ways users can upgrade is by using our Flash-My-Router Plan. This plan is perfect for users looking to upgrade the security of their network without little to no change.

Flash My Router

---

BUY NOW FOR $100

FEATURES

• 1-on-1 Session With Expert Technician
• Basic Internet/Wi-Fi/VPN Setup
• Open Source Firmware "Flash" Upgrade
• Includes a $30 Service Credit

Have any questions about Netgear zero-day vulnerabilities, router security, or router in general? Feel free to contact us!