NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
RBR850 Security Flaw - no password required
Typing 192.168.1.1 to access my router does not prompt for a username or password. I do not save or cache passwords. The behaviour is the same on Chrome, IE, Firefox, and Edge. The behaviour is th...
RESOLVED
With no help from NG support I have found the problem and the solution.
The two important details are, when the status led is solid white and won't go out, this means the router is still not fully setup. When in this state everything functions as expected and the user will not have any operational or functional issues, including modifying setup within the GUI.
The problems are that the white led status light stays on, and you can acccess the GUI from the WAN and LAN side.
The problem I found is during the setup process using the Orbi app, the last step takes you to a page where NG is trying to sell you added support. Previously I ignored this and closed out the app.
The solution is that you must make a selection, I chose no thanks. Once you make your selection the Orbi flashes the white status light and then the app moves to the next screen which states setup complete. White status light goes out as expected, and you are now prompted with a login pop up when trying to access the GUI using WAN or LAN.
Should someone experience this issue and are unable to resolve, please pm me and I will provide more details to assist you in correcting these two issues.
Can a moderator please mark this discussion as resolved.
Have you tried contacting Netgear support? They may be able to help you with this issue.
I have reported this to netgear support weeks ago. They have no idea as to the cause. Their solution is to return the unit to Costco and get a new one. Now that someone else has reported this. I believe this may be a FW issue. I have spent over 5 hours on the phone with level 2 support, with no resolution. My support ticket is still open since Jan 2nd. My unit had this issue from day one out of the box. Directly after setup I noticed access to GUI and the Orbi app without prompting for user name or password. You can also access the GUI from outside the network via fixed IP or Dynamic domain without entering a username or password. This is a huge security risk and nergear should be utilizing all their resources to get this resolved.
My unit is the new Costco version model RBR840 WiFi 6 AX.
SW version 3.2.9.2_1.2.4
HUGE SECURITY FLAW
I've asked some NG moderator eyes here in the forum to take a look at this. Something I'm not seeing with mine.
I have the RBR850 on that firmware (V3.2.9.2_1.2.4) and do not have that issue - I have to log in every time, and even logging in from a second computer or my phone will log the first session out. Not sure what is going on for you that is different.
