NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Orbi 2.2.1.210 fimware security issue (turns on guest network with no password)
Has anyone else experienced this? I upgraded by Orbi to 2.2.1.210 - everything seemed fine. I have a guest network (with a password) that I leave disabled and only enable when we have a guest. It is ...
Sorry, this is a valid proceedure to do as others have said it's worked for them:
https://community.netgear.com/t5/Orbi/Firmware-2-2-1-210-released-as-of-10-3-18/m-p/1647303/highlight/true#M42416
https://community.netgear.com/t5/Orbi/RBK40-Download-Speed-Slows-Down-After-5-Days/m-p/1643475/highlight/true#M41776
https://community.netgear.com/t5/Orbi/Orbi-MR-2-1-Update-3-23-18/m-p/1548414/highlight/true#M27868
https://community.netgear.com/t5/Orbi/speed-slows-down-Orbi/m-p/1551822/highlight/true#M28289
https://community.netgear.com/t5/Orbi/Is-2-1-3-4-in-auto-update/m-p/1553979/highlight/true#M28616
https://community.netgear.com/t5/Orbi/Orbi-Satellite-RBS50-Not-Connecting-via-Ethernet/m-p/1556692/highlight/false#M28949
I'll keep posted as I see fix. Thank you.
toe wrote:
Stop asking customers to do factory reset and other time wasting procedures that is not part of the instruction from Netgear themselves and hoping that it fixes something. Netgear should be the one doing the testing with new firmware releases to ensure integrity of previous configurations during upgrade. I think you might think that is helpful, but plenty of customers have wasted some many hours of their time doing unnecessary resets.
FURRYe38 wrote:
Would need to try a factory reset and setup from scratch to see if this is something that changed in the new FW. Something NG will need to know.
The fix mechanism is not the issue here. Any firmware update should not change the settings on the router such that it is then in an insecure state; in this case - a secure router with a password set on the guest network and the guest network turned off, was following the update, left with the guest network ON and not requiring a password.
The firmware update was succesful, there was no indication that there were any issues. This shouldn't and must not happen when a firmware update is applied to a device.
This will have to be looked into by NG then. Nothing else we can do here in the forums and your work around seems to work for now.
I discovered this too. Also have the latest firmware. V2.2.1.210. I am upset by the idea of strangers logging on to my network and rummaging through my private data. I am really disappointed and my confidence in the Netgear brand has been severely shaken. How can such a critical bug been allowed out in the wild? Wow! Treating their customers badly. The least this company can do is own up to it...