NETGEAR is aware of the Badlock security vulnerability that causes ReadyNAS OS 6 devices to be susceptible to man-in-the-middle (MiTM), denial of service (DoS), and similar attacks.
NETGEAR strongly recommends that you install firmware version 6.5.0 that was released on May 17, 2016. This firmware version eliminates the Badlock vulnerability.
To install firmware v6.5.0, visit https://kb.netgear.com/app/answers/detail/a_id/30662.
NOTE: If your system is running a version lower than ReadyNAS OS 6.4.2, you must follow the instructions in the provided link.
The potential for the Badlock vulnerability remains if you do not implement the patch or update the firmware as recommended. NETGEAR is not responsible for any consequence that could have been avoided by following the recommendations in this notification.
For more information about the Badlock vulnerability, visit http://badlock.org/.
Register your product at https://my.netgear.com/register/.
We appreciate and value having security concerns brought to our attention. NETGEAR constantly monitors for both known and unknown threats. Being pro-active rather than re-active to emerging security issues is fundamental for product support at NETGEAR.
It is NETGEAR's mission to be the innovative leader in connecting the world to the internet. To achieve this mission, we strive to earn and maintain the trust of those that use NETGEAR products for their connectivity.
To report a security vulnerability, visit https://bugcrowd.com/netgear.
If you are a NETGEAR customer with a security-related support concern, you can contact NETGEAR customer support at techsupport.security@netgear.com.
For all other issues, visit https://www.netgear.com/about/security/.
The security@netgear.com email address is no longer accepting messages and is no longer actively monitored.