R7000 buffer overflow exploit patch

I have firmware version V1.0.7.12_1.2.5 (need to get the newest one), but have a question.

The recommended firmware patch listed in the Netgear notification is:

Re: R7000 Vulnerability Note VU#582384

‎2016-12-12 09:56 PM

The Security Advisory has been updated with more information and beta firmware for some models. Thanks for your patience.

R7000-V1.0.7.10_1.2.3.chk

So, if I install this earlier version, will it mess up my router? I would assume later versions of the firmware would have that fix already embedded, wouldn't they?

Lew Wagner

Firmware

ElaineM
May 26, 2017
The latest firmware (1.0.8.34) for R7000 contains the fix.

The firmware that was indicated in that article is just the firmware that fixed it but moving forward all new fw releases has the fix.

2 Replies

IrvSp
Master
May 20, 2017
This is a question for NG Support to completely answer... maybe ElaineM can? However I would suspect unless called out in the README for the update as removed it would be.
ElaineM
NETGEAR Employee Retired
May 26, 2017
The latest firmware (1.0.8.34) for R7000 contains the fix.

The firmware that was indicated in that article is just the firmware that fixed it but moving forward all new fw releases has the fix.

Forum Discussion

R7000 buffer overflow exploit patch