This security note addresses the following NETGEAR PSV numbers: PSV-2017-0738, PSV-2017-0800.
NETGEAR is aware of an error in the ProSAFE Gigabit Web Managed (Plus) Switches user manual. The user manual incorrectly stated that NETGEAR Web Managed Switches offered a management VLAN as a security feature. Management VLANs are currently available only on NETGEAR Smart Managed and Fully Managed Switches.
This documentation error affects the following Web Managed Switches:
- GS105Ev2
- GS105PE
- GS108Ev3
- GS108PEv3
- GS116Ev2
- JGS516PE
- JGS524Ev2
- JGS524PE
NETGEAR released a corrected version of the user manual for these models as soon as the issue was brought to our attention. For the latest version of the user manual, see ProSAFE Gigabit Web Managed (Plus) Switches User Manual.
If you currently own a Web Managed Switch, NETGEAR recommends that you improve the security of your switch by changing the administrator password to a long and complex one containing a mixture of numbers, uppercase and lowercase letters, and symbols.
We appreciate and value having security concerns brought to our attention. NETGEAR constantly monitors for both known and unknown threats. Being pro-active rather than re-active to emerging security issues is fundamental for product support at NETGEAR.
It is NETGEAR's mission to be the innovative leader in connecting the world to the internet. To achieve this mission, we strive to earn and maintain the trust of those that use NETGEAR products for their connectivity.
To report a security vulnerability, visit https://bugcrowd.com/netgear.
If you are a NETGEAR customer with a security-related support concern, you can contact NETGEAR customer support at techsupport.security@netgear.com.
For all other issues, visit http://www.netgear.com/about/security/.
The security@netgear.com email address is no longer accepting messages and is no longer actively monitored.