If you use certain model Netgear routers, be careful which links you click.
Recently, researchers found three vulnerabilities in a number Netgear router models. Combined, these vulnerabilities could allow attackers to open ports on your router, or essentially do anything your router admin can do. That said, you do have to click a specially crafted link for the attack to work. Making matters worse, researchers have released a proof-of-concept (PoC) exploit for these flaws. Watch today’s video to learn more about the issue, and what you can do until Netgear patches.
Episode Runtime: 2:24
Direct YouTube Link: https://www.youtube.com/watch?v=Rturf_hUadI
EPISODE REFERENCES:
- Stop using Netgear routers until they patch – Ars Technica
- Netgear’s security advisory on their router flaws – Netgear
- US-CERT advisory on Netgear router flaws – US-Cert
- Netgear router 0day proof-of-concept (PoC) exploit – Exploit DB
- Blogger shares a workaround for Netgear router – Ba’s Blog
— Corey Nachreiner, CISSP (@SecAdept)
Leave a Reply