NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

CyberTri's avatar
CyberTri
Apprentice
Aug 20, 2019

Turning off UPnP causes authentication errors RAX80

If you don't know what UPnP (universal plug n' play) is look it up. It's a notoriously poorly rated, insecure, feature which was implemented to make lazy manufacturers not have to fight routers when advertising ports inside of home networks.

Its garbage. So as a security engineer for over 15 years, I never use it. I have owned multiple Asus and Netgear routers and Cisco FWs for home use. Never use UPnP.

I don't want my video cameras (which are often made in China...no matter what manufacturers assembles them) being able to open ports to the internet which then get constantly scanned and attacked for weakness by Nmap (look it up) hackers on the web.

So, I haven't asked it for years. Not on my X6 (R8000) before my new RAX80. So, I was very surprised to find out that on some firmware (.58 & .61 for sure) I discovered that if you turn it off multiple devices (Galaxy phones, HP laptops, Alexas) will get "Authentication errors".

No...I'm not kidding. Try it yourself.

NETGEAR: This is entirely UNACCEPTABLE. Fix your crappy firmware so that I and others that understand what this is about don't have to leave UPnP enabled to use our devices. Also,.61 broke the capture option in your /debug.htm menu.

Really. $400 to be more vulnerable to attacks than ever before. FAIL!

17 Replies