0day Root Netgear Flaw – Daily Security Byte EP.156

If you use a Netgear router, you’ll want to disable remote administration. In today’s video, I talk about two zero day vulnerabilities the Shellshock Labs found in a line of popular Netgear broadband routers. In a nutshell, if an attacker can access the administrative web page, she can gain complete control of your router. Press play to learn more about these flaws, and what you can do until Netgear patches.

(Episode Runtime: 2:01)

Direct YouTube Link: https://www.youtube.com/watch?v=DPbRUoWqYvg

EPISODE REFERENCES:

• Attackers starting to exploit 0day Netgear router flaws – ISPreview
• Blog post on 0day Netgear authentication bypass flaw – Shellshock Labs
• Blog post on 0day Netgear command injection flaw – Shellshock Labs
• Full Disclosure post on Netgear vulnerabilities – Full Disclosure

— Corey Nachreiner, CISSP (@SecAdept)

Share This: