Patch for Krack Vulnerability

[Auri]

ALL FIRMWARE should be updated. More info: https://betanews.com/2017/10/16/krack-wpa2-security-vulnerability/

[tacoFeline]

NETGEAR does seem to be taking the money, barely supporting, and then running away with the money. Hard to tell, they're being tight-lipped.

Do you know anyone, any groups, that are getting the word out on this? NETGEAR may only respond to pressure, not appeals to morality.

[tacoFeline]

"NETGEAR provides security updates to fix vulnerabilities or upgrade security in products for the longer of four years after product release date or two years after product end of life." - NETGEAR L2 Support

I am currently inquiring as to if and where this is listed on the website, and where it can be found for each individual product. Did others know of this?

[rockandroller]

What is EOL for the R7000 ?

[minimeme]

fwiw,

the FCC approval date: 07 August 2013 the page there doesn't show an actual release date.

https://wikidevi.com/wiki/Netgear_R7000

wouldn't have ever guessed that this router is actually older than my r6220, which was released

FCC approval date: 07 October 2014

(Est.) release date: 02 December 2014

https://wikidevi.com/wiki/Netgear_R6220

posted that info mainly for my own future reference

[alexxmc77]

PLEASE PATCH NIGHTHAWK D7000

[tacoFeline]

NETGEAR L2 Support says: "Our engineers are still working on a web page that explains this in more details and provides a lookup table where you will be able to check if their product is within support." 27 Oct. 2017

[Galt]

Netgear has rolled out a patch for the ORBI system that patches the WPA2 KRACK vulnerability (V2.0.0.76).  It will not show up as an online update, it must be installed manually.  I uploaded the patch yesterday.  For those with other routers, you may want to check, as it seems Netgear is finally getting these updates out to us.

https://kb.netgear.com/000049562/RBR50-RBS50-Firmware-Version-2-0-0-76-Hot-Fix

[dww_3]

OK, so they are still supporting the R7000 Nighthawk from all I can tell, since the just released a patch on 12/1/17. It says it addresses "secuirty issues," however every other patch kas mentioned the KRACK vulnerability. This one does not mention it by name. Any thoughts? Link to patch below - as the above post for the ORBI system, it must be installed manually and won't show up on your router's admin page... not sure why.

https://kb.netgear.com/000052576/R7000-Firmware-Version-1-0-9-14

[dww_3]

One more note on the release notes for the R7000 12/1/17 patch: The light will blink amber during an update, but should return to solid WHITE after the patch is complete, not solid amber as stated in the release notes.

"

1. The upgrade process is completed when the on screen progress bar completes.
2. If the upgrade progress bar on web GUI doesn’t display correctly during firmware upgrade, you can still check the status using Power LED. The Power LED should be blinking (amber) during firmware upgrade.  After firmware upgrade is done and boots up the system, it changes to steady AMBER color
3. Please DO NOT power off or reboot the device during firmware upgrade, otherwise, it  may result to a corrupt firmware and cause the device not to work.

[minimeme]

Still nothing for the R6220 though, huh? I did get the e-mail saying there was a new version. The latest firmware on netgears site is the same one I already have installed, 1.1.0.50_1.0.1