NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Admin ID Security Risk
How is it possible that a company the size of Netgear, can leave a huge security hole in their router - Orbi firmware. Not being able to disbale the admin ID of "admin" removes a layer of security ...
gslabbert5119 wrote:
Not being able to disbale the admin ID of "admin" removes a layer of security as the userid "admin" is a well known username, now all a hacker has to deal with is hacking the password and not have to trouble themselves with the userid. This makes the task of
Netgear is not alone in this "crime against humanity".
In years of watching this place, I cannot remember seeing any reports that people have accessed a device by breaking that security.
After all, as CrimpOn says, someone has to all but break into your house to get local access to your hardware.
Were this really that dangerous a move, the world, and this place, would be awash with complaints and reports of hacked systems. It has come up from time to time as a "feature request", but even those have gone away.
Anyone seriously paranoid, you could always intert a modem/router in front of an Orbi system and put that into AP mode. That would add one layer of security.
michaelkenward wrote:
gslabbert5119 wrote:
Not being able to disbale the admin ID of "admin" removes a layer of security as the userid "admin" is a well known username, now all a hacker has to deal with is hacking the password and not have to trouble themselves with the userid. This makes the task of
Netgear is not alone in this "crime against humanity".
In years of watching this place, I cannot remember seeing any reports that people have accessed a device by breaking that security.
After all, as CrimpOn says, someone has to all but break into your house to get local access to your hardware.
Were this really that dangerous a move, the world, and this place, would be awash with complaints and reports of hacked systems. It has come up from time to time as a "feature request", but even those have gone away.
Anyone seriously paranoid, you could always intert a modem/router in front of an Orbi system and put that into AP mode. That would add one layer of security.
Belittling someone on the basis of "some other vendors do it also" is incredibly ignorant when it comes to security.
Ok, so just because as far as you know a netgear router or Orbi system has never been hacked, does not mean it has not happened. Further consumers are a small portion of netgears business and there a many not so small businesses using home type routers and networks for their comms. In fact a rather large mortgage company that was taken of by the #3 bank at the time, had netgear routers and your and my personal info was at risk there, so it does affect you, or can, and we know that they were hacked, we found evidence when we did the conversion.
Simply put just because you live in a place where you can leave the keys to your kingdom does not mean that you should and eventually it will be stolen, and no I am not that paranoid, all I ask is that I am able to practice safe security as is mandated by the security industry.Not fixing the issue is shortsighted, and one once of prevention is better than 10 lbs of cure.
In addition to the administrative user name, Netgear also does not secure the administrative web site, i.e. uses "http" rather than "https". IF someone were to snoop on an Orbi long enough to break the WiFi encryption, and IF the Orbi administrator accessed the web site over WiFi while the snoop was recording, it would be possible to gather the Orbi login password. My Netgear Nighthawk router is exactly the same.
I, personally, handle this vulnerability by using only a wired computer for administration.
