Netgear DGN2200v4 - security access issue???

[2200v4]

Hi there,

I am a home user with little computer knowledge.(Windows 7 Home Premium)

My AVAST virus software indicated that I had a weakness with the access to my modem via the login mode accessed from my web browser (it listed the User Name [this cannot be changed according to Netgear instructions] & Password (Netgear default setting) for the dialog box which pops up when trying to access the Netgear Genie area for settings etc (I access this by placing a sequence of numbers in the browser (Firefox) address bar). I then proceeded to change the Password in the "ÄDVANCED" - Administration - Set Password" area. I placed the old password & new password in the appropriate area(s) & then proceeded with the 2 security questions & then hit apply. A page came up & indicated my "Old Password" was incorrect, which was the same one I had used to originally access this Netgear Genie area in the first place. I tried several times repeating this & even tried the new password I wanted here, to see if things would proceed, no success).

My issue now is that after I had logged out of the Netgear Genie area, & tried logging back in using the same specific number sequence in the browser address to access the modem settings (Netgear Genie) it now does not show the usual access dialog box (Authentication Access) in which you had to place the User Name & Password to access the modem area (Netgear Genie), it simply goes straight to Netgear Genie, & therefore all my settings & information. This seems an even worse security risk than I had before. My "Internet Setup" area also appeared to have my password already populated (it had the appropriate number of "dots" already in the box, perhaps this is normal because when I clicked on the area they all disappeared ready for a password?)

I restarted my computer twice to hopefully reset previous settings, & also switched of my modem & then restarted after a few minutes hoping to reset it. I also made sure that the browser has not recorded the password for here. No success, as soon as I enter the number sequence into the browser area it goes straight to Netgear Genie & therefore exposes all my settings & even displays my wireless password in the Home page.

Am I being unduly concerned here? Have I missed something obvious & misinterpreted what is happening here? It seems strange that whenever accessing before, a Authentication Access dialog box would always come up in which the User Name & Password had to be entered before you could get to Netgear Genie.

Thanks to everyone in advance for any help

[2200v4 · Accepted solution]

Hi Michaelkenward,

Very grateful for your advice & information here, feel much less concerned about any potential secuirity issues now.

The direct accessing of "Genie" is a bit of a mystery here because I went into the firefox browser area tracking down what addresses it has kept (& not kept) & it actually list(s) my local IP address for the modem network as one it does not retain for use. I will try & sort that one out.

Again, big thanks for your help here, really appreciated & nice to have someone so comprehensively reply to a user with little computer knowledge.

If the reply here seems late it is because I am in Australia.

All the best Michael

[michaelkenward]

---

@2200v4 wrote:
...(I access this by placing a sequence of numbers in the browser (Firefox) address bar)

---

The "numbers" are the local IP address (the address ion your network) for your DGN2200v4.

You can also use:

www.routerlogin.com

Don't be confused by the address, it isn't a website so much as the local address.

You can read the manual for your device here:

DGN2200v4 | Product | Support | NETGEAR

I wouldn't place too much faith in what AV software tells you. It exists partly to frighten you.

It is a good idea to change the default pass (password) to something unique, but beyond that don't worry too much.

Oh, and don't forget the password to get into the modem's settings is not the same as the password people need to access your wifi network.

Nor is it the password you need to login to your internet service. (The "Internet Setup" area.) They are all different.

I suspect that this is the bit where you talk about "password already populated". That's the idea. You want the modem to remember the ISP's password. Otherwise you will have to enter it all over again every time you reboot or restart the modem.

As to not being asked for your password to get into the "genie" – I assume that this is the web interface rather than the standalone software – maybe your browser has remembered it and filled in the details.

[2200v4 · Accepted solution]

Hi Michaelkenward,

Very grateful for your advice & information here, feel much less concerned about any potential secuirity issues now.

The direct accessing of "Genie" is a bit of a mystery here because I went into the firefox browser area tracking down what addresses it has kept (& not kept) & it actually list(s) my local IP address for the modem network as one it does not retain for use. I will try & sort that one out.

Again, big thanks for your help here, really appreciated & nice to have someone so comprehensively reply to a user with little computer knowledge.

If the reply here seems late it is because I am in Australia.

All the best Michael

[michaelkenward]

Your welcome. There are people round here who are much better informed than I am. They can step in if I have got anything hopelessly wrong. But we have certainly seen reports of people being frustrated by strange interactions with AV software.