This security advisory addresses the following PSV IDs and ZDI IDs:
|
PSV-2019-0296 |
ZDI-CAN-9642, |
|
PSV-2019-0295 |
ZDI-CAN-9647, |
|
PSV-2020-0119 |
ZDI-CAN-9767 |
|
PSV-2020-0118 |
ZDI-CAN-9768 |
|
PSV-2020-0001 |
ZDI-CAN-9618 |
|
PSV-2020-0009 |
ZDI-CAN-9703 |
|
PSV-2020-0108 |
ZDI-CAN-9756 |
NETGEAR is aware of multiple security vulnerabilities affecting the products listed in the following table.
NETGEAR strongly recommends that you download the latest firmware as soon as a firmware update or firmware hotfix is available for your product. Consult the following table to see whether new firmware is available.
It has been reported that there is a virus called Glupteba on Windows PCs that exploits the vulnerability in PSV-2020-0009 / ZDI-CAN-9703. To reduce the threat of this virus, ensure that your NETGEAR devices are updated with the latest firmware and that the antivirus software on your Windows PC is up to date.
The firmware version listed in the Last Affected Firmware Version column is the most recent firmware version that does not contain any fixes for the vulnerabilities in this advisory. All subsequent firmware updates or firmware hotfixes contain a fix for at least one of the vulnerabilities in this advisory.
|
Model |
Last Affected Firmware Version |
Fix Status |
PSVs Fixed in Latest Release |
ZDIs Fixed in Latest Release |
|
AC1450 |
All versions |
None; outside security support period |
|
|
|
AC2100 |
v1.2.0.62 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
AC2400 |
v1.2.0.62 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
AC2600 |
v1.2.0.62 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
CBK40 |
v2.3.5.12 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0108, 0118, 0119 |
ZDI-CAN-9618, 9642, 9643, 9647, 9648, 9649, 9755, 9756, 9767, 9768 |
|
CBK43 |
v2.3.5.12 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0108, 0118, 0119 |
ZDI-CAN-9618, 9642, 9643, 9647, 9648, 9649, 9755, 9756, 9767, 9768 |
|
CBR40 |
v2.3.5.12 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0108, 0118, 0119 |
ZDI-CAN-9618, 9642, 9643, 9647, 9648, 9649, 9755, 9756, 9767, 9768 |
|
D6000
|
v1.0.0.78 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
D6220 |
v1.0.0.52 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
D6300 |
All versions |
None; outside security support period |
|
|
|
D6400 |
v1.0.0.88 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
D7000v2 |
v1.0.0.56 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
D7800 |
v1.0.1.56 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9647, 9648 |
|
D8500 |
v1.0.3.44 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
DC112A |
v1.0.0.44 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
DGN2200v1 |
All versions |
None; outside security support period |
|
|
|
DGN2200M |
All versions |
None; outside security support period |
|
|
|
DGN2200v4 |
v1.0.0.110 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
DGND3700v1 |
All versions |
None; outside security support period |
|
|
|
DM200 |
v1.0.0.61 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
EAX20 |
v1.0.0.32 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EAX80 |
v1.0.0.36 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX2700 |
v1.0.1.56 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9642, 9643 |
|
EX3110 |
v1.0.1.62 |
Pre-Authentication Command Injection |
PSV-2019-0295 |
ZDI-CAN-9647, 9642, 9643 |
|
EX3700 |
v1.0.0.78 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX3800 |
v1.0.0.78 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX3920 |
v1.0.0.78 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX6000 |
v1.0.0.38 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX6100 |
v1.0.2.24 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX6100v2 |
v1.0.1.90 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
EX6110 |
v1.0.1.62 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
EX6120 |
v1.0.0.48 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX6130 |
v1.0.0.30 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX6150 |
v1.0.0.42 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX6200 |
v1.0.3.90 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX6920 |
v1.0.0.40 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX7000 |
v1.1.0.84 |
Production release available |
PSV-2019-0295; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX7300 |
v1.0.2.144 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
EX7300v2 |
v1.0.0.124 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
EX7320 |
v1.0.0.124 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
EX7500 |
v1.0.0.52 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
EX7700 |
v1.0.0.210 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
EX8000 |
v1.0.1.224 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
MK62 |
v1.0.4.98 |
Production release available |
PSV-2019-0295, 0296, 0001, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9642, 9643, 9618, 9768, 9767 |
|
MR60 |
v1.0.4.98 |
Production release available |
PSV-2019-0295, 0296, 0001, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9642, 9643, 9618, 9768, 9767 |
|
MS60 |
v1.0.4.98 |
Production release available |
PSV-2019-0295, 0296, 0001, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9642, 9643, 9618, 9768, 9767 |
|
LG2200D |
All versions |
None; outside security support period |
|
|
|
MBM621 |
All versions |
None; outside security support period |
|
|
|
MBR1200 |
All versions |
None; outside security support period |
|
|
|
MBR1515 |
All versions |
None; outside security support period |
|
|
|
MBR1516 |
All versions |
None; outside security support period |
|
|
|
MBR624GU |
All versions |
None; outside security support period |
|
|
|
MBRN3000 |
All versions |
None; outside security support period |
|
|
|
MVBR1210C |
All versions |
None; outside security support period |
|
|
|
R4500 |
All versions |
None; outside security support period |
|
|
|
R6120 |
v1.0.0.68 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R6200 |
All versions |
None; outside security support period |
|
|
|
R6200v2 |
All versions |
None; outside security support period |
|
|
|
R6220 |
v1.1.0.86 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R6230 |
v1.1.0.86 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R6250 |
v1.0.4.38 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R6300v1 |
All versions |
None; outside security support period |
|
|
|
R6300v2 |
v1.0.4.36 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R6400 |
v1.0.1.52 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 976 |
|
R6400v2 |
v1.0.4.84 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R6700 |
V1.0.2.8 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R6700v3 |
v1.0.4.84 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 976 |
|
R6800 |
v1.2.0.62 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R6900 |
v1.0.2.8 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R6900P |
v1.3.1.64 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R7000 |
v1.0.11.100 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R7000P |
v1.3.1.64 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R7100LG |
v1.0.0.52 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R7200 |
v1.2.0.62 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R7300DST |
All versions |
None; outside security support period |
|
|
|
R7350 |
v1.2.0.62 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R7400 |
v1.2.0.62 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R7450 |
v1.2.0.62 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R7500v2 |
v1.0.3.46 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R7800 |
v1.0.2.68 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
R7850 |
v1.0.5.48 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R7900 |
v1.0.3.18 |
Production release available |
PSV-2019-0295, 0296*; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642*, 9643*, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R7900P |
v1.4.1.50 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R7960P |
v1.4.1.50 |
Production release available |
PSV-2019-0295, 0296 |
ZDI-CAN-9647, 9648, 9649, 9642, 9643 |
|
R8000 |
v1.0.4.52 |
Production release available |
PSV-2019-0295, 0296*; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642*, 9643*, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R8000P |
v1.4.1.50 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119, |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R8300 |
v1.0.2.130 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
R8500 |
v1.0.2.130 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
RS400 |
v1.5.0.34 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
WGR614v10 |
All versions |
None; outside security support period |
|
|
|
WGR614v8 |
All versions |
None; outside security support period |
|
|
|
WGR614v9 |
All versions |
None; outside security support period |
|
|
|
WGT624v4 |
All versions |
None; outside security support period |
|
|
|
WN2500RP |
All versions |
None; outside security support period |
|
|
|
WN2500RPv2 |
v1.0.1.54 |
Production release available |
PSV-2019-0295, 0001, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9618, 9756, 9768, 9767 |
|
WN3000RP |
All versions |
None; outside security support period |
|
|
|
WN3000RPv2 |
All versions |
None; outside security support period |
|
|
|
WN3000RPv3 |
v1.0.2.80 |
Production release available |
PSV-2019-0295, 0926, 0001, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9642, 9643, 9618, 9756, 9768, 9767 |
|
WN3100RP |
All versions |
None; outside security support period |
|
|
|
WN3100RPv2 |
All versions |
None; outside security support period |
|
|
|
WN3500RP |
All versions |
None; outside security support period |
|
|
|
WNCE3001 |
All versions |
None; outside security support period |
|
|
|
WNCE3001v2 |
All versions |
None; outside security support period |
|
|
|
WNDR3300v1 |
All versions |
None; outside security support period |
|
|
|
WNDR3300v2 |
All versions |
None; outside security support period |
|
|
|
WNDR3400v1 |
All versions |
None; outside security support period |
|
|
|
WNDR3400v2 |
All versions |
None; outside security support period |
|
|
|
WNDR3400v3 |
v1.0.1.24 |
Production release available |
PSV-2019-0295, 0296, 0001, 0108, 0118, 0119 |
ZDI-CAN-9647, 9648, 9649, 9642, 9643, 9618, 9756, 9768, 9767 |
|
WNDR3700v3 |
All versions |
None; outside security support period |
|
|
|
WNDR4000 |
All versions |
None; outside security support period |
|
|
|
WNDR4500 |
All versions |
None; outside security support period |
|
|
|
WNDR4500v2 |
All versions |
None; outside security support period |
|
|
|
WNR1000v3 |
v1.0.2.72 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
WNR2000v2 |
v1.2.0.8 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
WNR3500v1 |
All versions |
None; outside security support period |
|
|
|
WNR3500Lv1 |
All versions |
None; outside security support period |
|
|
|
WNR3500Lv2 |
v1.2.0.56 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
WNR3500v2 |
All versions |
None; outside security support period |
|
|
|
WNR834Bv2 |
All versions |
None; outside security support period |
|
|
|
XR300 |
v1.0.3.38 |
Production release available |
PSV-2019-0295, 0296; PSV-2020-0001, 0009, 0108, 0118, 0119 |
ZDI-CAN-9642, 9643, 9647, 9648, 9649, 9618, 9703, 9756, 9767, 9768 |
|
XR450 |
v2.3.2.56 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
XR500 |
v2.3.2.56 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
|
XR700 |
v1.0.1.20 |
Production release available |
PSV-2019-0295 |
ZDI-CAN-9647, 9648, 9649 |
*Vulnerability was already fixed in an earlier firmware release. The current firmware release or firmware hotfix includes all earlier fixes.
Note: NETGEAR released multiple hardware versions of some of the affected products. A hardware version is denoted by “v” and a number following the product model. For example, R6700v3 is a different product from R6700v2. If a model number does not have a hardware version number after it, then it is hardware version 1. R6700 means the same thing as R6700v1. If you’re not sure what model you have, check the label on the back or bottom of your NETGEAR product.
To download and install the new firmware for your product:
- Visit NETGEAR Support.
- Start typing your model number in the search box, then select your model from the drop-down menu as soon as it appears.
If you do not see a drop-down menu, make sure that you entered your model number correctly, or select a product category to browse for your product model. - Click Downloads.
- Under Current Versions, select the first download whose title begins with Firmware Version.
- Click Download.
- Update your firmware:
- If you are updating a router or gateway, follow the instructions in this knowledge base article: How do I manually update the firmware on my NETGEAR router?
- If you are updating a different product, follow the firmware update instructions in your user manual.
For help finding your user manual, see Where can I find information about my NETGEAR product?
NETGEAR plans to release firmware updates that fix these vulnerabilities for all affected products that are within the security support period.
If no firmware fix is currently available for your product, NETGEAR recommends that you follow the workarounds and best practices in this advisory.
In addition, if your product is outside the security support period, we recommend that you follow the guidance of the United States Cybersecurity and Infrastructure Security Agency (CISA): “[CISA] encourages users and administrators to update to the most recent firmware version and to replace end-of-life devices that are no longer supported with security patches.”
Security Hotfixes
Security hotfixes are fixes that are applied on top of existing, fully tested firmware. Releasing hotfixes allows NETGEAR to quickly update existing products and streamline the firmware verification process without going through full regression testing. These hotfixes are targeted at specific security issues and should have minimal effect on other areas of the product’s code. Therefore, we do not expect that installing the hotfix will affect the regular operation of your product. Although our pre-deployment testing process did not indicate that these hotfixes would affect device operability, because full regression testing is reserved for final production firmware fixes, we always encourage our users to monitor their devices closely after installing a firmware hotfix.
Workarounds
You do not need to turn off Remote Management on extenders. The best way to reduce the risk to your extender is to follow the guidelines in the Best Practices section of this advisory.
Turning off Remote Management on your router or gateway web user interface significantly reduces your risk of exposure to these vulnerabilities. Remote Management on your router or gateway’s web user interface is turned off by default. If you never enabled Remote Management, you do not need to take any action to turn off Remote Management.
The Remote Management feature on your router or gateway web user interface is different from the Remote Management feature in the Nighthawk app. To avoid confusion between the two features, NETGEAR has renamed the Nighthawk app feature “Anywhere Access.” The Remote Management feature on your router or gateway web user interface opens an external port. The Anywhere Access feature in the Nighthawk app uses a secure, authenticated connection through the NETGEAR Cloud and does not open any ports. NETGEAR believes that the Anywhere Access feature in the Nighthawk app is a much more secure method to access your WiFi router.
You do NOT need to turn off Anywhere Access in the Nighthawk app. Turning off Anywhere Access in the Nighthawk app does not provide additional protection from these vulnerabilities.
For instructions, see How do I turn off Remote Management on my NETGEAR router or gateway?
Best Practices
NETGEAR recommends that you follow these security best practices:
- Always update your NETGEAR products to the latest firmware. For more information, see How to update firmware on your NETGEAR product.
- Use a strong, unique WiFi password. We strongly recommend changing your router’s WiFi password if you haven’t changed it since installing your router.
- Don’t share your WiFi password with visitors. If your product supports guest WiFi, use guest WiFi instead if you want to give them Internet access through your home WiFi router. For more information:
- Web browser: How do I set up a guest network on my Nighthawk router?
- Nighthawk app: How do I set up guest WiFi using the Nighthawk app?
- If you suspect that unknown or unauthorized devices might have access to your network, log in to your router or access the Nighthawk app and block those devices using one of the appropriate methods for your product:
- For routers and gateways:
- How to configure Access Control or MAC Filtering (Smart Wizard routers)
- How do I pause or resume Internet for a device on my network using the Nighthawk app?
- How do I use access control to allow or block devices from accessing the Internet on my Nighthawk router?
- How do I view or block devices that are connected to my Nighthawk Pro Gaming router?
- For mobile routers, search your product’s user manual for information about restricting access based on your product model.
- For extenders, we recommend logging in to your router to configure access control or block devices.
- For routers and gateways:
Disclaimer
This document is provided on an "as is" basis and does not imply any kind of guarantee or warranty, including the warranties of merchantability or fitness for a particular use. Your use of the information in the document or materials linked from the document is at your own risk. NETGEAR reserves the right to change or update this document at any time. NETGEAR expects to update this document as new information becomes available.
NETGEAR is not responsible for any consequences that could have been avoided by following the recommendations in this notification.
Acknowledgements
Zero Day Initiative
Common Vulnerability Scoring System
CVSS v3 Rating: Medium - High
CVSS v3 Score: 6.3 - 8.8
Contact
We appreciate and value having security concerns brought to our attention. NETGEAR constantly monitors for both known and unknown threats. Being pro-active rather than re-active to emerging security issues is fundamental for product support at NETGEAR.
It is NETGEAR's mission to be the innovative leader in connecting the world to the internet. To achieve this mission, we strive to earn and maintain the trust of those that use NETGEAR products for their connectivity.
To report a security vulnerability, visit https://bugcrowd.com/netgear.
If you are a NETGEAR customer with a security-related support concern, you can contact NETGEAR customer support at techsupport.security@netgear.com.
For all other issues, visit http://www.netgear.com/about/security/.
Revision History
2020-06-18: Published advisory
2020-06-19:
- Removed redundant firmware download instructions
- Added ZDI IDs
- Clarified which PSVs and ZDI IDs are fixed by the available hotfixes
2020-06-22:
- Added updated hotfixes for R6400v2 and R6700v3
- Added hotfixes for R7000 and R8000
- Updated and clarified explanation of security hotfixes
- Updated and clarified explanation of Remote Management
- Moved instructions for turning off Remote Management to a separate article
2020-06-23: Added hotfixes for R6900, R6900P, R7000P, and R7900
2020-06-24:
- Added hotfixes for R7850, R8500, and WNR3500Lv2
- Added asterisks next to all vulnerabilities that were fixed in an earlier firmware release
- Added guidance to monitor products after installing a hotfix
2020-06-25: Added hotfixes for D6220, D6400, D7000v2, D8500, EX7000, and R7100LG
2020-06-29: Added hotfixes for DC112A, DGN2200v4, EX3700, EX3800, EX3920, EX6120, EX6130, EX6920, R6250, RS400, and XR300
2020-06-30: Added updated hotfix for R7000
2020-07-02: Added hotfix for R6700
2020-07-04:
- Added hotfixes for R6300v2 and R8300
- Added updated hotfix for R8500
2020-07-06: Added hotfixes for EX6000, EX6100, and EX6200
2020-07-07: Added hotfixes for EX6150, WNR1000v3, and WNR2000v2
2020-07-08: Added hotfix for R6400
2020-07-20:
- Added the following models to the advisory: EAX20, EAX80, EX7500, R7900P, R8000P, WN3000RPv2, WN3000RPv3, WN3100RPv2, and WNCE3001v2
- Added hotfixes for EAX20, EAX80, EX7500, R7900P, and R8000P
- Added production firmware releases for R6400v2 and R6700v3
- Removed the separate list of affected models
- Updated and reformatted the table to include unfixed models, the last affected firmware version, and information about products outside the security support period
- Updated listing of several products in the table to clarify hardware version
- Added an explanation of the “last affected firmware” column
- Added a note about hardware versions
- Updated firmware download instructions
- Added a link to and quote from CISA regarding products outside the security support period
- Moved the explanation of security hotfixes to a separate section
2020-08-13:
- Added production firmware releases for all remaining products that are within the security support period
- Edited text in the Workarounds section to account for the renaming of the Remote Management feature in the Nighthawk app to Anywhere Access
2020-11-13: Added virus information for PSV-2020-0009 / ZDI-CAN-9703
2020-11-14: Added the virus name Glupteba and clarified that the virus affects Windows PCs
2020-12-31:
- Added the following models to the advisory: AC2100, AC2400, AC2600, CBK40, CBK43, CBR40, D6000, DM200, EX2700, EX6100v2, EX6110, EX7300, EX7300v2, EX7320, MK62, MK63, MK64, MR60, MS60, R6120, R6220, R6230, R7350, R7400, R7450, R7500v2, R7800, R7960P, X450, XR500, and XR700.
- Added production firmware releases for: WN2500RPv2, WN3000RPv3, and WNDR3400v3.