NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
CyberTri
Aug 20, 2019Apprentice
Turning off UPnP causes authentication errors RAX80
If you don't know what UPnP (universal plug n' play) is look it up. It's a notoriously poorly rated, insecure, feature which was implemented to make lazy manufacturers not have to fight routers when advertising ports inside of home networks.
Its garbage. So as a security engineer for over 15 years, I never use it. I have owned multiple Asus and Netgear routers and Cisco FWs for home use. Never use UPnP.
I don't want my video cameras (which are often made in China...no matter what manufacturers assembles them) being able to open ports to the internet which then get constantly scanned and attacked for weakness by Nmap (look it up) hackers on the web.
So, I haven't asked it for years. Not on my X6 (R8000) before my new RAX80. So, I was very surprised to find out that on some firmware (.58 & .61 for sure) I discovered that if you turn it off multiple devices (Galaxy phones, HP laptops, Alexas) will get "Authentication errors".
No...I'm not kidding. Try it yourself.
NETGEAR: This is entirely UNACCEPTABLE. Fix your crappy firmware so that I and others that understand what this is about don't have to leave UPnP enabled to use our devices. Also,.61 broke the capture option in your /debug.htm menu.
Really. $400 to be more vulnerable to attacks than ever before. FAIL!
Its garbage. So as a security engineer for over 15 years, I never use it. I have owned multiple Asus and Netgear routers and Cisco FWs for home use. Never use UPnP.
I don't want my video cameras (which are often made in China...no matter what manufacturers assembles them) being able to open ports to the internet which then get constantly scanned and attacked for weakness by Nmap (look it up) hackers on the web.
So, I haven't asked it for years. Not on my X6 (R8000) before my new RAX80. So, I was very surprised to find out that on some firmware (.58 & .61 for sure) I discovered that if you turn it off multiple devices (Galaxy phones, HP laptops, Alexas) will get "Authentication errors".
No...I'm not kidding. Try it yourself.
NETGEAR: This is entirely UNACCEPTABLE. Fix your crappy firmware so that I and others that understand what this is about don't have to leave UPnP enabled to use our devices. Also,.61 broke the capture option in your /debug.htm menu.
Really. $400 to be more vulnerable to attacks than ever before. FAIL!
17 Replies
Sort By
- CyberTriApprentice
Typo:
So, I haven't (used) it for years.
- CyberTriApprentice
- Christian_RNETGEAR Employee Retired
Hi CyberTri - Would you mind providing a screenshot when the 'Authentication Error" occurs.
~Christian- CyberTriApprenticeReally? You need a screen shot of the words "Authentication error"?
It happens on every device. Alexa. Android.
Turn off your UPnP and screen shot it yourself.