NETGEAR has become aware of an international cybersecurity threat actor known as Volt Typhoon that is targeting devices such as routers and mesh WiFi systems.
At this time, we are not aware of any NETGEAR product vulnerabilities being exploited by Volt Typhoon. If we are notified of such a vulnerability, we will fix it for all products that are within the security support period.
For all NETGEAR customers, we recommend taking the following steps:
- Keep your device firmware up to date by following the instructions below.
- Use strong passwords for both your router’s admin account and your WiFi network. For more information about creating sufficiently strong passwords, refer to the guidelines set forth by the Cybersecurity & Infrastructure Security Agency (CISA): https://www.cisa.gov/news-events/alerts/2018/03/27/creating-and-managing-strong-passwords
- Disable port forwarding. Port forwarding is disabled by default.
- If your router supports the Remote Management feature, make sure that it is disabled. The Remote Management feature is disabled by default. NETGEAR removed the Remote Management feature from all of our currently sold routers in a firmware update in 2021.
- (Optional) Disable Universal Plug and Play (UPnP).
Caution: UPnP helps devices such as Internet applications and computers access your network and connect to other devices as needed. UPnP also enables multiplayer gaming, peer-to-peer connections, and some real-time communication, such as instant messaging. Disabling UPnP might interfere with the operation of some software and some Internet-connected devices, such as printers, gaming consoles, and smart TVs. As long as you do not have any compromised devices on your network, it is generally safe to leave UPnP enabled. However, with a far-reaching cybersecurity threat active, we recommend disabling UPnP.
If you believe that any device in your network has been compromised, we recommend that you take the following additional steps:
- Change all passwords for any devices that connect to the Internet, including your router.
- Change all passwords for all of your online accounts.
- Examine your online accounts for malicious activity.
Best Practices for Updating Firmware
We recommend that you keep your NETGEAR devices up to date with the latest firmware. Firmware updates contain security fixes, bug fixes, and new features for your NETGEAR products.
If your product is supported by one of our apps, using the app is the easiest way to update your firmware:
- Orbi products: NETGEAR Orbi app
- NETGEAR WiFi routers: NETGEAR Nighthawk app
- Some NETGEAR Business products: NETGEAR Insight app (firmware updates through the app are available only for Insight subscribers)
If your product is not supported by one of our apps, you can always update your firmware manually by following the instructions below.
To download the latest firmware for your NETGEAR product:
- Visit NETGEAR Support.
- Start typing your model number in the search box, then select your model from the drop-down menu as soon as it appears.
If you do not see a drop-down menu, make sure that you entered your model number correctly, or select a product category to browse for your product model. - Click Downloads.
- Under Current Versions, select the first download whose title begins with Firmware Version.
- Click Release Notes.
Follow the instructions in the firmware release notes to download and install the new firmware.