WARNING Vulnerability ID: NON-2015-0211 on my Netgear Router WNR2000v3 Please help

[Daniel272829]

I scanned my MacBook with the avast antivirus and the network Scan a vulnerability which I was searching online to fix additional solution yet this is what I found on PCWorld website 

At first glance, sending requests to this SOAP (Simple Object Access Protocol) service requires an authenticated session. However, Adkins discovered that sending HTTP requests with a blank form and a “SOAPAction” header is enough to extract sensitive information from a vulnerable device.

The information that can be extracted includes the administrator password; the name and access keys for the wireless networks configured on the device, and details about the device including its model, serial number and firmware version.

Adkins confirmed that Netgear WNDR3700v4, WNDR3700v4, WNR2200 and WNR2500 devices are vulnerable. However, because of the flaw’s location, other devices, including WNDR3800, WNDRMAC, WPN824N and WNDR4700, might also be affected, he said.

This was posted on the 16  February 2015 and today is October 22 2015 and I was just wondering if this was going to be fixed or not because I search everywhere no one has A answer to fix This I need to know please I don't want my information to be on the Hacker world. i like my netgear router but i am afraid to use it now I need to know if I need to change router Brands Thanks 

By the way this is the link of 1 of the few posts that talks about this vulnerability

NG WNR2000v3 Vulnerability NON-2015-0211

[ElaineM · Accepted solution]

@Daniel272829 I would like to inform you that we have released the firmware that fixes SOAP vulnerability.

To upgrade, click here.

Thank you for you for being a loyal NETGEAR customer.

[mediatrek]

My guess is based on Netgear's response to other security vulnerabilities in their product firmware they have been made aware of is that they will IGNORE the holes and use the excuse that they labeled the product as EOL (End of Life) status. The WNR2000v3 is EOL status.

They recently did this with the ReadyShare (Kcode NetUSB module) vulnerability with a number of models that still were on big box store shelves even as soon as two months ago. (ie- WNDR4300v1 @ Target, Staples, etc). Netgear just wants you go out out and buy a new router that has the security hole patched. It is so sad and why I have stopped placing Netgear on the top of my router brand recommendation list.

[ElaineM]

NETGEAR is working on a new firmware release for WNR2000v3 to address this potential security breach. This new firmware should be available in the next few weeks. We will let you know as soon as we receive a firm release date and notify you as soon as it becomes available.

In the meantime, to avoid this potential security breach, NETGEAR recommends that you ensure Wi-Fi security is turned on (this is the default setting on NETGEAR routers & gateways) to prevent unauthorized devices from joining your network. NETGEAR also recommends that you ensure remote management is turned off (this is also a default setting on NETGEAR routers & gateways) to prevent unauthorized devices from accessing your network from the WAN.

Thank you for being a loyal NETGEAR customer.

[ElaineM · Accepted solution]

@Daniel272829 I would like to inform you that we have released the firmware that fixes SOAP vulnerability.

To upgrade, click here.

Thank you for you for being a loyal NETGEAR customer.

[appless]

Is this firmware update going to make it to other routers? I have the same vunerabilty with wndr3700v2. Really need a firmware update ASAP.

[ElaineM]

@appless I'm inquiring this to our engineering team and will give you an update as soon as I have an answer.

Thank you!
 

[Daniel272829]

 Thanks for your reply i really appreciate it. but this update did not patch the vulnerability here is the latest status vulnerability check on a mac running IOS El Capitan 10.11.1 (15B42)

[ElaineM]

Thank you for the screenshot.

Let me forward this to our engineering department and I will get back to you. 

[jpurciel]

I currently own a Netgear WNR1000v2 router.  Does Netgear plan on addressing this security vulnerability with this model as well?

[ElaineM]

@jpurciel Are you getting the same exact message on your Avast? Is it the same Vulnerability ID?

[ElaineM]

@Daniel272829 & @jpurcielDo you guys have tried using a Windows PC?

Can you also verify if you get the same window shown below? The network should state no threats.

By the way, @Daniel272829 make sure you have the latest firmware installed which is 1.1.2.12.

[jpurciel]

Hello.  Yes, that specific vulnerability alert is showing up while running an Avast network scan. Thanks.

[jpurciel]

Also, I'm getting the Avast alerts on a Windows 10 Pro device.  Thanks.

[ElaineM]

Thank you for the screenshot.

What's the version of your Avast?
 

[jpurciel]

Hi.  I'm running ver. 11.1.2241.

[Daniel272829]

Here you go version 11.4 (45519) Avast mac security 2015

[ElaineM]

@jpurciel & @Daniel272829 Kindly check your inboxes.

[aleks4_44]

Hello!
My antivirus "Avast" (01.11.2241) when scanning a local network issued a problem with my Netgear router VNR1000v2 (Ver. 1.0.2.12).
"This device can be used for the purpose of hacking your network"
ID directory NON-2015-0211.
Do you have a solution to this vulnerability?

[ElaineM]

@aleks4_44 Kindly check your inbox.

[Adrian_E]

I have the same vulnerability picked up by Avast (v11.1.2245) on my WNDR3700v1 using windows 7 pro

Comes up as 'readyshare' and the ID code given in the title of this thread, which is how I came across it

My router is running firmware version 1.0.16.98 which I believe is the latest available (although I had to use the website to download and install this as the in-router update function didn't pick it up)

[rwaldron]

I am getting the same exact same message for my Netgear with Avast Premium TM822A model Netgear router. Please inbox me via rebecca.waldron15@yahoo.com the way to update my Netgear. I love Netgear...I just want to be protected, thank you! 

[ElaineM]

Hi Everyone, 

We would like let you all know that our engineers are still investigating on this reported issue.

Kindly PM me your contact infos and please install teamviewer for further analysis.

@rwaldron TM822A is the model of the modem. Can you verify at the bottom of the NETGEAR device the exact model of the router?

Thank you!

[Ktucci]

I'm notcing all sorts of random spikes/problems i am having due to this issue. I believe its more then just a warning atleast for me for the past week i've notcied spikes while in any games, as well as disconnects from random things while maintaining internet, its quite wild actually I'm using the WNR2000 and i am recieving the same error. Please help as i believe this issue might be whats corresponding with my random spike problem even tho it shows me not loosing internet but when im playing games that require a little more bandwith then skype or teamspeak i can still talk and hear with no lag and listen to youtube but then i play a game and it will play perfectly fine then spike and some times disconnect me, and i have my resource monitor up and i dont see any thing or see my network utilization spike it'll stay at 0 even tho ill be lagging out of the games.

[ElaineM]

@Ktucci What's the exact version of your router? Is it also version 2?

What's the exact firmware version installed on your router?

Just to verify if the problem you're having is related to the original post, try to lower down the MTU on the router.

[Marcie1]

I also am getting the same message; I am new to this community and new to joining online help in general, so I don't know if I'm making my inquiry the appropriate way.  Is there an update or fix for this yet?