NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
milestog
Jan 31, 2020Aspirant
RBR850 Security Flaw - no password required
Typing 192.168.1.1 to access my router does not prompt for a username or password. I do not save or cache passwords. The behaviour is the same on Chrome, IE, Firefox, and Edge. The behaviour is th...
- Feb 22, 2020
RESOLVED
With no help from NG support I have found the problem and the solution.
The two important details are, when the status led is solid white and won't go out, this means the router is still not fully setup. When in this state everything functions as expected and the user will not have any operational or functional issues, including modifying setup within the GUI.
The problems are that the white led status light stays on, and you can acccess the GUI from the WAN and LAN side.
The problem I found is during the setup process using the Orbi app, the last step takes you to a page where NG is trying to sell you added support. Previously I ignored this and closed out the app.
The solution is that you must make a selection, I chose no thanks. Once you make your selection the Orbi flashes the white status light and then the app moves to the next screen which states setup complete. White status light goes out as expected, and you are now prompted with a login pop up when trying to access the GUI using WAN or LAN.
Should someone experience this issue and are unable to resolve, please pm me and I will provide more details to assist you in correcting these two issues.
Can a moderator please mark this discussion as resolved.
mrwkbrdr
Feb 07, 2020Star
Netgear has no idea, as they have yet to contact me. My case is still open stating awaiting next level support.
Any progress on this?
I've talked to others that have this system and they don't see this issue.
FURRYe38
Feb 08, 2020Guru - Experienced User
Did you send Blanca_O a private message? I believe she's trying to contact you. Keep in contact with Blanca.
mrwkbrdr wrote:Netgear has no idea, as they have yet to contact me. My case is still open stating awaiting next level support.
Any progress on this?
I've talked to others that have this system and they don't see this issue.
- mrwkbrdrFeb 10, 2020Star
She contacted me only to tell me they still have no idea as to the cause of the issue.
she states that my case is awaiting next level support.
frustrating that I paid $600 for a unit with a security flaw in which I am not using because of this security flaw. You would think netgear would pull out all of their resources to at least attempt to understand why you can access the GUI without being prompted to login. My internet provider assigns a fixed IP address, I can type in this IP address and access the Orbi GUI without being asked for any user name or password. This seems serious to me, but I guess netgear does not. My case has been open since January 4th. Very poor experience with netgear support and product.
- FURRYe38Feb 10, 2020Guru - Experienced User
Is this IP address the WAN side IP address (##.##.###.###) that your accessing from a remote location? Or from the LAN side 192.168.1.1?
I persume that Remote Managment is disabled?
Takes time for NG to test and reproduce problems found if there is a problem. Nothing happens over night. Just because only a couple of users are seeing this, doesn't mean everyone is.
I also talked to NG and they said they could not reproduce. Others as well when access the LAN side IP address at 192.168.1.1. We all get the log in window. Please confirm that this is the WAN side your trying to access and not the admin page from the LAN side. Lets be clear about this. Just want to fully understand.
Might ask support about an RMA while there is stil time. Also ask about any beta FW as well. They sometimes have a beta you can try.
mrwkbrdr wrote:She contacted me only to tell me they still have no idea as to the cause of the issue.
she states that my case is awaiting next level support.
frustrating that I paid $600 for a unit with a security flaw in which I am not using because of this security flaw. You would think netgear would pull out all of their resources to at least attempt to understand why you can access the GUI without being prompted to login. My internet provider assigns a fixed IP address, I can type in this IP address and access the Orbi GUI without being asked for any user name or password. This seems serious to me, but I guess netgear does not. My case has been open since January 4th. Very poor experience with netgear support and product.
- mrwkbrdrFeb 10, 2020Star
I can access the GUI from both the wan and lan side without being asked to log in.
Remote management is unchecked.
You would thin they would just replace the unit?
As far as an RMA
they cannot figure out how to complete as my unit is the Costco iteration RBR840
I'm just trying to help them investigate. But beyond frustrated! Just gonna return to Costco.
furry wrote
Is this IP address the WAN side IP address (##.##.###.###) that your accessing from a remote location? Or from the LAN side 192.168.1.1?
I persume that Remote Managment is disabled?
Takes time for NG to test and reproduce problems found if there is a problem. Nothing happens over night. Just because only a couple of users are seeing this, doesn't mean everyone is.
I also talked to NG and they said they could not reproduce. Others as well when access the LAN side IP address at 192.168.1.1. We all get the log in window. Please confirm that this is the WAN side your trying to access and not the admin page from the LAN side. Lets be clear about this. Just want to fully understand.
Might ask support about an RMA while there is stil time. Also ask about any beta FW as well. They sometimes have a beta you can try.