NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
threatbuster
Jun 05, 2018Tutor
Why no firmware updates for C7800 Nighthawk
Netgear website says no firmware available for C7800 (AC3200) Nighthawk cable modem/router. Why not? Thanks.
lellsworth3
Jun 14, 2018Tutor
While the updates to a modem/router are pushed out via the ISP, the software update *comes from* Netgear. The R7800 standalone router had security updates as recently as May 2018 it appears. My C7800 is up-to-date per Netgear documentation but has not been updated in the last 6 months as far as I know. When was the last C7800 update? If not as recently as R7800, why not? A lot of security vulnerabilities have been discovered recently...
michaelkenward
Jun 15, 2018Guru - Experienced User
Did you read the firsr reply?
ISPs control firmware updates on cable modems.
There is nothing that you or Netgear can do about it. The ISPs don't want anyone else messing around with hardware on their networks.
If you have fears about the security of your internet connection, talk to your ISP.
Or, to take back control of your security, buy a router and work out how to put your C7800 into modem only (bridge) mode.
- lellsworth3Jun 15, 2018Tutor
Please pay attention. I know firmware updates are rolled out by the ISP. But the updates themselves come from the vendor-- Netgear in this case-- and are rolled out when the vendor provides the ISP with a new update. I have confirmed this with both my ISP (Comcast) and Netgear.
The question is whether or not Netgear is PROVIDING AS TIMELY UPDATED FIRMWARE for newly discovered router vulnerabilities for these modem/router combos, as it does for standalone routers. If Netgear can't or won't keep them up-to-date, Netgear should not be selling them, period. This is totally Netgear's responsibility-- the ISP is just the conduit.
- michaelkenwardJun 15, 2018Guru - Experienced User
I am not the one with ADD.
Let's try again.
- You are worried about the security of your cable modem/router
- Your Internet service provider demands control over firmware updates for devices on its network
Here's a strange idea, ask your ISP what it is doing to guarantee the security of your modem router.
I know you find it hard to accept the way things work, so try reading this for yet more evidence that you should start with the ISP.
Who and how can update cable modem firmware? - Information Security Stack Exchange
Netgear and all the other modem makers can write all the updates they like, but if the ISP won't play ball you are stuffed.
- lellsworth3Jun 15, 2018Tutor
As I said, I have asked Comcast and they say they do updates whenever the vendor, Netgear in this case, makes one available. Netgear also says they have to make an update available to the ISP for modem/routers. You seem to be saying "maybe Netgear is making updates available but Comcast isn't taking them". If true, that would be a serious problem in its own right-- but this is not what Comcast tells me they do and I have no evidence to the contrary.
However Comcast policy was not my question here obviously. Rather it is this: does Netgear make firmware updates for new router vulnerabilities available to ISPs on roughly the same schedule for modem/routers as it does for standalone routers? If not, modem/routers are inherently less secure and in my opinion Netgear should not be selling a device that cannot be properly secured. However, if the updates are more or less simultaneous, then great!
To get specific, when was the last update for my C7800 released compared to the date of the latest update for a comparable standalone router like perhaps the R7800?
I can see from the Netgear site that I have the latest Comcast version, V3.01.38 but I can't see a date nor compare to a similar standalone router. Ultimately I want to know Netgear's policy on making available timely security updates for modem/routers (Comcast already claims to deploy them when they get them).
Here is a related anomaly I'd like to understand: while the Comcast "Deployed" version is listed as V3.01.38, two other vendors are listed with "Approved" versions of V3.01.36 and "All other ISPs (Current Production Firmware)" are listed as V3.01.06 as well. Why would Comcast have a version seemingly ahead of "current production"? -- not that that would reassure me since updates for the router side are my concern and I can't yet compare those to Netgear standalone routers. But why the discrepancy?
If anyone can address any of these concerns I'd appreciate answers.
- drouel0610Dec 01, 2018Aspirant
I have a C7800/AC3200 Nighthawk X4S- bought it in 2017, no initial issues, super fast, etc- 2018 I received over 50+ DoS attacks ytd-
im no longer able to login to it either- you mention the ISP (in my case COX) controls the firmware updates, does that mean they also are able to login to my routers admin page and set things up the way they want? I tried logging in the same way as I did when I purchsed it from BestBuy- connecting my browser (chrome, IE, mozilla,etc) to 192.168.0.1 (which is my GW address) and Im getting an error: ERR_NETWORK_ACCESS_DENIED - yet even at this exact momment, im accessing the internet & typing this post- I have installed Netgears GENIE- it sees my SSIDS, etc- shows i have 8 devices connected and gives me those IPs- I also tried using the http://routerlogin.net (on back of router/modem) and get the same network access denied error- I have disabled SEP prior to trying to access the router as well- (wanted to be able to access the router w/out using a network cable to the back of it)
- michaelkenwardDec 01, 2018Guru - Experienced User
drouel0610 wrote:
you mention the ISP (in my case COX) controls the firmware updates, does that mean they also are able to login to my routers admin page and set things up the way they want?
No. Their control is limited to writing new firmware. If they feel like it.
im no longer able to login to it either-
Im getting an error: ERR_NETWORK_ACCESS_DENIED -That looks like a Windows error.
Where do you see it?