Netgear router software allows for exfil of secret data when system is 'blocked' from access control
Putting a connected device in 'blocked' mode by using access control still allows for secret data to be exfiltrated out of the device and onto the WAN by using UDP protocol. Apparently the "blocked" status only applies to TCP.
Re: Netgear router software allows for exfil of secret data when system is 'blocked' from access con
I've tested this on a NetGear R7000 and a nighthawk AX6. Devices that stream via UDP can still push to a listener on the internet even though the device is 'blocked' via access control. Only when i Block a service "UDP -ALL" does UDP get blocked.
