NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

PHolder's avatar
PHolder
Aspirant
May 25, 2017
Solved

Any plans for Samba fix for CVE-2017-7494 ?

I posted elsewhere about this, but CVE-2017-7494 NEEDs to be patched on any device still in operation, and I think that includes the older, technically out of support models that I have 6 of.   Wit...
CVE-2017-7494
File Sharing
Other Discussions
Security
SMB
WannaCry
Spooled's avatar
Spooled
Aspirant
Jun 06, 2017

Competitive or not, I currently have several Duo's that are unaccessable now, even after updating the FW to v 4.1.16.

 

Coming in to work and discovering that all of my Netgear NASes are permanently inaccessible was a pretty big shock.  Refusing to enable SMB-2 so that I could transfer to a new device is also quite jarring.

 

I really liked my Duo's - but now I am looking at other vendors.

 

 

StephenB's avatar
StephenB
Guru
Jun 06, 2017

 

Spooled wrote:

Coming in to work and discovering that all of my Netgear NASes are permanently inaccessible was a pretty big shock.  

  

Your IT department disabled SMB1 on your office PC?

Spooled wrote:

Refusing to enable SMB-2 so that I could transfer to a new device is also quite jarring.

 

It's not about enabling SMB2.  They'd need to implement SMB2 on that NAS in the first place.  

 

Is FTP available?  That's another way to get the data off.  

  • cathcam's avatar
    cathcam
    Guide
    Jun 12, 2017

    I for one would like to thank Netgear for the OS4.x update to fix Samba issues that was recently released.
    https://kb.netgear.com/000038793/RAIDiator-x86-Version-4-2-31

    I understand the pro's and cons of continuing to support old hardware, and appreciate that Netgear continues to address the most important issues. I have two Netgear ReadyNAS devices, one I use, the other wakes up once per week and rsync backs up the one we use. One of these was purchased in 2008, the other was bought off ebay in 2015 after the power supply in the first failed. Netgear owes me nothing, these a great and very economical.

  • mdgm-ntgr's avatar
    mdgm-ntgr
    NETGEAR Employee Retired
    Jun 06, 2017

    It's an old long discontinued product. SMB2 performance would likely be quite poor. We do have source code for GPL software available. You can try compiling a newer samba if you want, but for Sparc I don't think it would be worth the effort.

     

    Personally I did ask management for all the legacy code to be released as open source some years ago but that's not my call.

     

    It's my understanding that disabling SMB1 was a suggested temporary workaround till you've patched all your Windows PCs with the fix for WannaCry. Once all your PCs are patched SMB1 could be turned back on.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

Learn More