NETGEAR Routers and CVE-2016-582384 security vulnerability

SUCCESS! ! !

At least for the R8000 router.

I downgraded to V1.0.2.46_1.0.97, which is the most recent non-current version.  The downgrade with flawlessly -- no problems at all. I did not loose any settings, so all seems to be working.  I tried the exploit and it did not work.  Like others have reported (after making sure I was logged out of the router), it returned a page saying I was not authorized.

I hope Netgear will provide a new software update for the router. I do not like running an old version -- I feel like there were probably some problems that were fixed in the newer version, but the newer version has an extremely dangerous flaw.

Someone mentioned connecting via the internet (WAN) side vs the LAN or home side.  The PROBLEM is, that your web browser AT HOME, within your LAN could go to a web page, even on a well known site that has a link on a picture (or like within an ad) that has that command embeded.  You do not have to type it in to the top line. It can be an embeded link, and it will run the link and affect the router.

But -- good for now -- or at least, I feel safer.

Yes, I did get that at the bottom,

=========

bin
dev
etc
lib
media
mnt
opt
proc
sbin
share
sys
tmp
usr
var
www

However there was upteen lines above it with partial HTML:

alue)
    {

        var button;
        
        button=document.getElementsByName('buttonHit');
        button[0].value=btn.name;

        button=document.getElementsByName('buttonValue');
        button[0].value=value;
        return true;
    }

  function clickButton(message)
  {
      alert(message);
  }
  
  function mainOnload()
  {
  	
  }



  function changeCursorPointer()
  {
  	document.body.style.cursor='pointer';
  }

  function changeCursorDefault()
  {
  	document.body.style.cursor='default';
  }


  function iframeResize(iframe){
alert("Enter iframeResize "+iframe);
              if(iframe && !window.opera){
              	
      	          if(iframe.contentDocument && iframe.contentDocument.body.offsetHeight){      	          		
alert('before '+iframe.height+" document "+iframe.Document.body.offsetHeight);
                      iframe.height=iframe.contentDocument.body.offsetHeight+80;  
alert('after '+iframe.height);
                  }
        	        else if(iframe.Document && iframe.Document.body.scrollHeight){
alert('before '+iframe.style.height+" document "+iframe.Document.body.scrollHeight);

      	              iframe.style.height=iframe.Document.body.scrollHeight;
alert('after '+iframe.style.height); 

Literally hundreds of lines like that.

Although the end is the expected output does that really mean 'something' could be done to/on the router?