NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

unlisted's avatar
unlisted
Aspirant
Apr 14, 2024

R8000P vulnerabilities http_basic_auth, weak_password

AT&T give me the message below; is AT&T correct? If so, can the R8000P be fixed?

Device
R8000P
Description
There were 2 vulnerabilities found on your R8000P.
The vulnerabilities are http_basic_auth, weak_password. These vulnerabilities may allow an attacker to damage your device.
Firmware
Security

7 Replies

  • michaelkenward's avatar
    michaelkenward
    Guru
    Apr 14, 2024
    unlisted wrote:
    AT&T give me the message below; is AT&T correct? If so, can the R8000P be fixed?

    Which bit of AT&T gave you that message?

     

    Then the usual boilerplate questions to eliminate some of the more common issues that crop up here.

    What firmware version do you have on the device?

    A number is more useful than "the latest". There may be newer versions, or "hot fixes", that do not show up if you check for new firmware with an app or in the browser interface.

    If there is one it might also help if you told people the make and model number of the modem/gateway/ONT that connects this router to the Internet. Is it, by any chance, also a router, with a set of LAN ports on the back?

    I ask because a lot of people turn up here trying to put a router behind a modem that is also a router. That can complicate troubleshooting.

    • unlisted's avatar
      unlisted
      Aspirant
      Apr 14, 2024
      Great questions and the answers are the usual in part and atypical in part. Firmware is latest as of this post, and if Netgear releases revised new firmware then I will probably allow it to be installed. ATT-T's scanning software is ATT default (i.e., included not extra each month) ActiveArmor software. Netgear hardware is configured as access point (i.e., dhcp server disabled). I am curious about what exactly AT&T is identifying.
      • michaelkenward's avatar
        michaelkenward
        Guru
        Apr 14, 2024
        unlisted wrote:
        Firmware is latest as of this post, and if Netgear releases revised new firmware then I will probably allow it to be installed.

        There is a clue in there as to why claims of "latest" are not much help.

         

        If you rely on "allow it to be installed" there is a risk that it is not the latest. Only the version number tells us what is really going on at your end.

         

        Apps and the GUI interface are famously good it missing updates. People making those claims can be years out of date.

         

        ATT-T's scanning software is ATT default (i.e., included not extra each month) ActiveArmor software. Netgear hardware is configured as access point (i.e., dhcp server disabled). I am curious about what exactly AT&T is identifying.

        There's a lot going on in there, apart from knowing nothing about what you mean by "ATT default". All of it open to misunderstanding.

         

        For example, access point is not the same thing as "dhcp server disabled", in the same way that people turn up here thinking that turning off the wireless disables a router.

         

        The people who respond to problems that arrive here have seen hundreds of messages. They are familiar with the common issues that can gum up a network. Their questions are based on dealing with those problems. If they don't get clear answers they may more on to the next fresh message.

         

        As to your question, ask AT&T. It should know all about the false positives that it can create.