NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

StrongFish's avatar
StrongFish
Aspirant
Feb 28, 2020

RBR50 Vulnerable to CVE-2019-15126?

Are the Orbi mesh WIFI router/waps vulnerable to kr00k (CVE-2019-15126)? If so, when will a patch be released. It seems the last firmware patch was released quite some time ago. 

 

Thanks!

5 Replies

  • tomschmidt's avatar
    tomschmidt
    Virtuoso
    Mar 01, 2020

    Looking up CVE-2019-15126, it appears to affect devices that use certain Broadcomm WiFi chips.  The Orbi uses a Qualcomm WiFi control chip which is currently not listed for this CVE.

    • CrimpOn's avatar
      CrimpOn
      Guru - Experienced User
      Mar 01, 2020

      Thanks for the reassurance.  I have been unsuccessful in searching for a description of the component parts in Orbi models.

      I found the FCC filing for the RBR50, but the pictures are too blurry to read the chip information.

      Is there a web page somewhere showing the chips in each model?

  • FURRYe38's avatar
    FURRYe38
    Guru - Experienced User
    Mar 01, 2020

    Is there a link to this CVE? 

     

    StrongFish wrote:

    Are the Orbi mesh WIFI router/waps vulnerable to kr00k (CVE-2019-15126)? If so, when will a patch be released. It seems the last firmware patch was released quite some time ago. 

     

    Thanks!