A new bug in R7000?

[alokeprasad]

https://www.exploit-db.com/exploits/40898/

Reported Dec 11, 2016

Is this different from the security issue #582384 that is all the rage these days?

Does this affect other Nighthawk routers?

Aloke

PS: I don't own this device.. but I would like to know if it affects my R9000

[JamesGL · Accepted solution]

Hi,

Check this article for more info. If the model of your device is not on the list then it is not affected by the vulnerability.

http://kb.netgear.com/000036386/CVE-2016-582384

[RMinNJ]

Looks different yes..  

[ElaineM]

Hello All,

I will check this with our engineering team.

Thank you!

[alokeprasad]

What did you find out?  Especially about other models that might be affected?

[ElaineM]

Our engineers are currently investigating this. 

As a reminder, you may send all security vulnerability inquiries directly to security@netgear.com.

[alokeprasad]

I received this from the "Product Security Incident Response Team" on 12/23/2016:

"NETGEAR confirms we received the potential product vulnerability disclosure. Currently we are validating this claim.

The Incident No for this issue is : XXX-XXXX-XXXX. Please use this number in all your communication regarding this disclosure with Netgear."

So, stay tuned folks.. especially those w the R7000.  And ask if your router is also affectd (as a lot of the firmwares are based on a common codebase. Unfortunately, it is often an outdated opensource code..)

For reference, the details are at https://www.exploit-db.com/exploits/40898/

BTW, I have a R9000

[JamesGL · Accepted solution]

Hi,

Check this article for more info. If the model of your device is not on the list then it is not affected by the vulnerability.

http://kb.netgear.com/000036386/CVE-2016-582384

[JamesGL]

Hi alokeprasad,

We’d greatly appreciate hearing your feedback letting us know if you need further assistance.