Orbi WiFi 7 RBE973
Reply

Re: WPS Security Leak

Woodcutter
Aspirant

WPS Security Leak

How to turn off WPS? - all articles read indicate this should be off as it can be a security issue otherwise?

 

Model: R6220|AC1200 Smart WiFi Router with External Antennas
Message 1 of 9

Accepted Solutions
schumaku
Guru

Re: WPS Security Leak


@James721 wrote:

WPS can not be disabled in Netgear routers. ...That said WPS will still function if the physical button is pressed on the router itself. 


The UI says "WPS Settings (disabled when smart connect is enabled)", also here the WPS is still indicated in the beacon, and the WPS button appears to remain workable.

 


@James721 wrote:

And yes another poor design by Netgear. 


Agree.

View solution in original post

Message 5 of 9

All Replies
antinode
Guru

Re: WPS Security Leak

> How to turn off WPS? [...]

 

   Visit http://netgear.com/support , put in your model number, and look
for Documentation.  Get the User Manual.  Read.  Look for "Specify WPS
Settings" (or "WPS").

 

> [...] all articles read [...]

 

   Thanks for the helpful links.

Message 2 of 9
schumaku
Guru

Re: WPS Security Leak


@Woodcutter wrote:

How to turn off WPS? - all articles read indicate this should be off as it can be a security issue otherwise?


The only real problem withut physical access is the brute force possibility many consumer devices didn't had a protection mechanism up to some years ago.

 

Everything you want to know about is nicely explained here -> How do NETGEAR Home routers defend WiFi Protected Setup PIN against brute force vulnerability?

 

Are your visitors having physical access to your router? So they have access to the WPS button, too. If you want to prohibit this option - disable WPS completely. Further on, the router reset button which can be abused, too. And finally your visitors are able to plug any computer to an Ethernet port. Think about it. The question is always a balance between commodity and risk.

 

Along with Android 9 release , Google depreciated WPS - no more WPS support to establish a connection.

Message 3 of 9
James721
Luminary

Re: WPS Security Leak

WPS can not be disabled in Netgear routers. You can disable the pin number for connecting to WPS. That said WPS will still function if the physical button is pressed on the router itself. And yes another poor design by Netgear. 

Message 4 of 9
schumaku
Guru

Re: WPS Security Leak


@James721 wrote:

WPS can not be disabled in Netgear routers. ...That said WPS will still function if the physical button is pressed on the router itself. 


The UI says "WPS Settings (disabled when smart connect is enabled)", also here the WPS is still indicated in the beacon, and the WPS button appears to remain workable.

 


@James721 wrote:

And yes another poor design by Netgear. 


Agree.

Message 5 of 9
Woodcutter
Aspirant

Re: WPS Security Leak

Thanks,  since when WPS is on it poses a security breach via the router why is this option to turn WPS off not available?

Message 6 of 9
schumaku
Guru

Re: WPS Security Leak

The security breach was based on brute force trying PIN numbers - the Netgear routers stop the tests after three failed attempts, until the router is rebooted.

 

To reboot, you need either physical access - or a remote administration capability requiring authentication with the password.

 

With physical access to the router, almost everything can be done ... so disabling the WPS button has just a limited "power of protection".

Message 7 of 9
Woodcutter
Aspirant

Re: WPS Security Leak

Thanks, appreciated.

Message 8 of 9
Woodcutter
Aspirant

Re: WPS Security Leak

Read manual, did not resolve my question on how to turn off WPS. But thanks for your suggestion.

Message 9 of 9
Top Contributors
Discussion stats
  • 8 replies
  • 3030 views
  • 0 kudos
  • 4 in conversation
Announcements

Orbi WiFi 7