× NETGEAR will be terminating ReadyCLOUD service by July 1st, 2023. For more details click here.
Orbi WiFi 7 RBE973
Reply

4.1.8-T5 Security issue - guest access bug [FIXED]

mdgm-ntgr
NETGEAR Employee Retired

4.1.8-T5 Security issue - guest access bug [FIXED]

There is a guest access security bug on 4.1.8-T5.

I just updated an NV+ to 4.1.8-T5 and all three of my shares with AFP enabled showed guest access as enabled under Shares > Share Listing in Frontview.

Two of my shares which I had set with read/write set as the default access for the share over AFP, the guest user was able to access over AFP.

The share which I had default access set to disabled, but had a write-enabled user for, the guest user was unable to access (well at least it didn't show in the list of AFP shares).

Whilst not as severe as the issue on 4.2.18 for x86 (I think), this is still a security bug.
Message 1 of 6
Jedi_Knight
Tutor

Re: 4.1.8-T5 Security issue - guest access bug

Will take a look..
Message 2 of 6
Jedi_Knight
Tutor

Re: 4.1.8-T5 Security issue - guest access bug

Will be fix in next release.. thanks for reporting the issue.
Message 3 of 6
WSJ
Aspirant
Aspirant

Re: 4.1.8-T5 Security issue - guest access bug

4.1.8-T9 is available (promising to fix the bug)
Message 4 of 6
mdgm-ntgr
NETGEAR Employee Retired

Re: 4.1.8-T5 Security issue - guest access bug

I'll have to update my NV+ with AFP enabled now to confirm this is fixed. It'll take me about half an hour to download it there as I have a slow internet connection there.
Message 5 of 6
mdgm-ntgr
NETGEAR Employee Retired

Re: 4.1.8-T5 Security issue - guest access bug [FIXED]

Just checked and it's fixed in T9.
Message 6 of 6
Discussion stats
  • 5 replies
  • 4730 views
  • 0 kudos
  • 3 in conversation
Announcements