Potential Vulnerability on ReadyNas 6.9.3

[gyves1]

Hi Everyone,

My Bitdefender BOX v2 has scanned my network and found 2 suspicious items on my ReadyNas 312 OS 6.9.3.

1) DoS vulnerability

2) Non-secure communication with a Netgear server

I would like to know these issues are known by Netgear?

And how can we fix them quickly and soon?ReadyNas OS 6.9.3 vulnerability

[Marc_V · Accepted solution]

Hi @gyves1

The report you are trying to submit might not be elgible for rewards but you you can still report it.

In addition you can make your Network secure by using Security applications or configuring your router regarding outside access of your Network.

ReadyNAS connected on the LAN or remotely using ReadyCloud is secure. Any threats or Vulnerabilities reported are always being handled accordingly.

You can always go to the link and updates/advisory about Vulnerabilities detected are always listed there.

Regards

[Marc_V]

Hi @gyves1

NETGEAR's Security team makes sure every reports submitted gets investigated I would encourage you to report what you have discovered by going into this page or go directly to this site https://bugcrowd.com/netgear

Hope this helps!

Regards

[gyves1]

Many thanks 😉

But my issue is out of scope of this bug programme 😕

I can't contact Netgear support because I haven't support subsciption.

The only accepted way by Netgear is this community website 😕 

[Marc_V · Accepted solution]

Hi @gyves1

The report you are trying to submit might not be elgible for rewards but you you can still report it.

In addition you can make your Network secure by using Security applications or configuring your router regarding outside access of your Network.

ReadyNAS connected on the LAN or remotely using ReadyCloud is secure. Any threats or Vulnerabilities reported are always being handled accordingly.

You can always go to the link and updates/advisory about Vulnerabilities detected are always listed there.

Regards

[gyves1]

Ok, I have found the correct url for out of scope reporting = https://bugcrowd.com/netgearkudos

😉

Thanks