Netgear has addressed a critical remote code execution vulnerability, tracked as PSV-2019-0076, that would allow an attacker to take over the Nighthawk R7800 router running versions prior to 1.0.2.68.

Another security flaw, PSV-2018-0352, was also addressed by Netgear. This vulnerability is a post-authentication command injection issue that impacts all R7800 routers running firmware versions prior to 1.0.2.60. The PSV-2018-0352 flaw also affects the D6000, R6000, R7000, R8000, R9000, and XR500 family of routers.

While Netgear has released patches for both of these bugs, flashing your router with Open Source DD-WRT firmware is a recommended step to avoid flaws found in default router firmware.

FULL ARTICLE