Netgear R7000 firmware V1.0.9.12_1.2.23 security issues. What security issues?

[CTam]

Is there a list of security issues the firmware patched? I can't find it anywhere.

[ElaineM]

The security advisory will be updated for any related concerns regarding the vulnerability. 

[bugmenot2]

this firmware was released before that vulnerability you linked was made public. he's asking what the 1.0.9.12 security vulnerabilities were, because there was no advisory posted for it.

[CTam]

The only description to the firmware update was "fixes security issues". Doesn't give me much to work with.

[ElaineM]

Sorry about that, it fixes this vulnerability. 

[bugmenot2]

also elaine if you could let the appropriate party know that the R7000 v1.0.9.12 firmware has yet to be posted on the open source page: https://kb.netgear.com/2649/NETGEAR-Open-Source-Code-for-Programmers-GPL

[ElaineM]

@bugmenot2 Thank you for that. I already sent the request. 

[jetspeedz]

ElaineM

How is it that Netgear releases these firmware without fully testing them?

https://community.netgear.com/t5/Nighthawk-WiFi-Routers/nighthawk-R7000-firmware-V1-0-9-12-1-2-23-up...