NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

mikespiegel99's avatar
Oct 31, 2018
Solved

ReadyNas 3220 Apache Requirements

I'm running the latest firmware for my ReadNAS 3220 which is 6.9.3 and I had a recent vulnerability scan ran on my network which detected that the ReadyNAS is using an unsecure version of Apache which is 2.2.34 per my Nessus scan.   It suggests upgrading to 2.4.x

 

My question is three-fold;

1.  What purpose does Apache serve on the ReadyNAS?  Meaning, is it entirely needed

2.  Is there a firmware upgrade scheduled to address this?  If so, when?

3.  Can I manually upgrade the version of Apache on the device?  If so, is there a readme/PDF that details the overall steps in performing the upgrade steps?

 

Thanks

 

Mike Spiegel


  • mikespiegel99 wrote:

    1.  What purpose does Apache serve on the ReadyNAS?  Meaning, is it entirely needed

     


    It is the web server used by the admin GUI, so it is definitely needed.

     


    mikespiegel99 wrote:

     

    2.  Is there a firmware upgrade scheduled to address this?  If so, when?

     


    https://community.netgear.com/t5/ReadyNAS-Beta-Release/ReadyNASOS-6-10-0-T185-Beta-2/m-p/1651396#M10285

     

    Nothing public on the schedule, but generally public betas only last 2-3 months.

     


    mikespiegel99 wrote:

     

    3.  Can I manually upgrade the version of Apache on the device?  If so, is there a readme/PDF that details the overall steps in performing the upgrade steps?

     

    I wouldn't attempt it, as it could easily break the admin ui.  If you need it right away, then consider installing the beta.  There is of course some risk, but if you keep an eye on the forum you should see some feedback from others who are trying it.

1 Reply

Replies have been turned off for this discussion
  • StephenB's avatar
    StephenB
    Guru - Experienced User

    mikespiegel99 wrote:

    1.  What purpose does Apache serve on the ReadyNAS?  Meaning, is it entirely needed

     


    It is the web server used by the admin GUI, so it is definitely needed.

     


    mikespiegel99 wrote:

     

    2.  Is there a firmware upgrade scheduled to address this?  If so, when?

     


    https://community.netgear.com/t5/ReadyNAS-Beta-Release/ReadyNASOS-6-10-0-T185-Beta-2/m-p/1651396#M10285

     

    Nothing public on the schedule, but generally public betas only last 2-3 months.

     


    mikespiegel99 wrote:

     

    3.  Can I manually upgrade the version of Apache on the device?  If so, is there a readme/PDF that details the overall steps in performing the upgrade steps?

     

    I wouldn't attempt it, as it could easily break the admin ui.  If you need it right away, then consider installing the beta.  There is of course some risk, but if you keep an eye on the forum you should see some feedback from others who are trying it.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More