RBR50 High Risk Vulnerability

Hi again brise . I know the Orbi routers weren't part of this Netgear Security Alert. I was merely trying to point out that the issue reported in your vulnerability assessment scan is a known issue to Netgear with other routers; and since their own Netgear Armor reported it in the context of a vulnerability scan, then I assume that the Orbi routes also suffer from the same security flaw. I am no expert at this brise , far from it. I basically have the same Orbi set up you have and it makes me nervous that vulneraribility assessment scans are not being performed on a regular basis; even more so after reading your post. 

As I wrote above:

"Basic Auth is a standard way used to challenge usernames and passwords in a Web browser, on http or https sessions, ... if this code does pop-up in a http page, it's typically considered a major risk - because of the content (realm, username, password) are going over the network without reasonable encryption."

Except for the "special case" where the device is the first in the data path (e.g. a wireless extender with mywifiext.net , or a router with myrouterlogin.net , or an Orbi router with orbilogin.net where the device can capture the DNS request and return the LAN IP here is hardly a way to have "clean" https certificate installations on a LAN - without local DNS, without your own domain, ... so it's disputable what is the better choice - non-protected credentials on what should be considered a secure LAN, or even more nasty browser complaints about invalid certificate, ....