Reply
Occasional Contributor
Posts: 5
Registered: ‎2011-10-20

WNDR3800 doesn't ask for password at login??!?

Just got my 3800 set up and running. I changed the default SID, etc., and password to the router administration. But when I log out, then return to the main page, I'm logged in, and can still see everything (including my wireless password and logs)!!!!

After setting it and logging out a number of times, I convinced myself it's really and truly not checking the password for login as follows:


    I'm running the newest firmware, 1.0.0.24... is this a problem with this version of the firmware? Need this fixed ASAP!!
Esteemed Contributor
Posts: 12,949
Registered: ‎2015-07-05

Re: WNDR3800 doesn't ask for password at login??!?

The login details are retained for the current browser session and will be lost if the browser itself is closed or the PC shutdown, this is common for many networking devices not just Netgear devices. Higher end equipment intended for a multi-admin environment such as an office may use https: but for home use the session login is unlikely to be an issue since only one user can login at a time.
Occasional Contributor
Posts: 14
Registered: ‎2011-09-28

Re: WNDR3800 doesn't ask for password at login??!?

I also just updated to the latest firmware (1.0.0.24) and it won't logout. Tried a browser restart, flush cache, reboot. No joy. It is broken

Also broken is the UPnP. There is no more Internet Gateway in my network connections
Occasional Contributor
Posts: 14
Registered: ‎2011-09-28

Re: WNDR3800 doesn't ask for password at login??!?

zipperx wrote:
Also broken is the UPnP. There is no more Internet Gateway in my network connections


Ahhh the gateway came back. Some kind of delay
Occasional Contributor
Posts: 5
Registered: ‎2011-10-20

Re: WNDR3800 doesn't ask for password at login??!?

Mars Mug wrote:
The login details are retained for the current browser session and will be lost if the browser itself is closed or the PC shutdown, this is common for many networking devices not just Netgear devices. Higher end equipment intended for a multi-admin environment such as an office may use https: but for home use the session login is unlikely to be an issue since only one user can login at a time.


But what I'm saying is, if I log out in Firefox, and use Internet Explorer to change the password, Firefox is still not prompted for the password when I return to the administration page. Once the password is changed, the cached login details should be invalid. Once I log out, the cached login should be invalid. Once the browser is closed, the cached login should be invalid.

I just hit the admin page again; haven't visited it in two days. I can see everything, not prompted for a password. If some kind of token is persisting that the router accepts because I logged in once who-knows-how-long-ago, then Netgear has a fix to release. Because that is NOT any kind of standard security practice, and it's not acceptable.

It concerns me that a company who makes routers has a problem with standard security practices... It casts doubt as to what else they are screwing up.
Esteemed Contributor
Posts: 12,949
Registered: ‎2015-07-05

Re: WNDR3800 doesn't ask for password at login??!?

If what zipperx said in Post #3 is correct, and I have no reason to disbelieve what was said, then your router is operating differently to all other Netgear home grade routers I have used (that’s a lot) and I would say that the symptoms you describe are a fault, it should not be doing what you and zipperx describe.
Esteemed Contributor
Posts: 2,024
Registered: ‎2011-05-23

Re: WNDR3800 doesn't ask for password at login??!?

Check to see if you have your browser(s) configured to save your password(s).

In IE9:

- Click on (the gear icon in top right corner) Tools>Delete Browsing History...

- Scroll down to Passwords and ensure that box is unchecked.

I haven't been using FF, but you should find a similar option if you look around.
Esteemed Contributor
Posts: 2,024
Registered: ‎2011-05-23

Re: WNDR3800 doesn't ask for password at login??!?

Sorry, that should be "make sure the box is checked". Next, delete your browsing history.

You could also configure IE9 to Empty Temporary Internet Files Folder When Browser is Closed. You'll find that option under Tools>Internet Options>Advanced.

Alternatively, you could use In Private browsing mode which will automatically delete your browsing session upon exit. Go to Tools>Safety>InPrivate Browsing.

(Other thoughts: Wish I had the option to edit my posts. Smiley Sad)
Initial Contributor
Posts: 2
Registered: ‎2011-10-24

Re: WNDR3800 doesn't ask for password at login??!?

Hello,

My device is weeks new. I'm having the exact same issues.

I can confirm that this has nothing to do with browsers saving passwords. This same issue occurs on a brand new fresh install PC.

All in all, the *18 firmware step-up to *24 has been an absolute disaster in terms of security vulnerabilities. No connection, outside or in requires authentication on the router. This is scary!

Above that, 'Block Services' and 'uPnP' doesn't do what it's told and many of my ports are being left open.

I have never heard or experienced such issues with Netgear devices in the past, ever!

I would check with the developers on who had a hand in programming the latest firmware. To me, it seems a bit suspicious.

PLEASE GIVE FULL ATTENTION TO THIS ISSUE

Looking forward to a resolution ASAP.

Thank you.
Initial Contributor
Posts: 2
Registered: ‎2011-10-24

Re: WNDR3800 doesn't ask for password at login??!?

In the meantime, I suggest everyone to revert back to firmware 1.0.0.18
( http://support.netgear.com/app/answers/detail/a_id/19461/~/wndr3800-firmware-version-1.0.0.18 )

Unless the updates found here for 1.0.0.24 is more essential to you
http://forum1.netgear.com/showthread.php?t=70839
Discussion Stats
Top Contributors