NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
R8500 Latest Firmware Version V1.0.2.154 Broke DNS!
Hello, the latest firmware version V1.0.2.154 for the R8500 router appears to have broken DNS! I have to refresh pages multiple times to get them to load. Attached is the most common error. DNS_PR...
Try this version?
CogX wrote:
Well, that didn't take long, still got the brief DNS probe error screen in Chrome, on one of the usual websites where it happens.
new firmware .158 released
I don't really want to try .158, because I doubt it fixes this DNS bug, but more than that, CISA has listed three more security vulnerabilities that aren't yet fixed:
r8500_firmware NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to password.cgi.
2022-03-26 9
CVE-2022-27945
netgear -- r8500_firmware NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi.
2022-03-26 9
CVE-2022-27946
netgear -- r8500_firmware NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameter.
2022-03-26 9
CVE-2022-27947
Well thanks for this post. It just about settles it for me. I need a newer, more secure router.
I have suspected the router was being accessed and updated/reconfigured but I dont get anything but DHCP activity in the logs which in itself is an indicator.
I have thought about placing a pfsense or sophos between the router and cable modem but thats just dressing up a pig IMO.
shopping I will go....
