{"id":44278,"date":"2021-12-03T17:30:12","date_gmt":"2021-12-03T17:30:12","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/netgear-router-flaws-exploitable-with-authentication-like-the-default-creds-on-netgears-website\/"},"modified":"2021-12-03T17:30:12","modified_gmt":"2021-12-03T17:30:12","slug":"netgear-router-flaws-exploitable-with-authentication-like-the-default-creds-on-netgears-website","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/netgear-router-flaws-exploitable-with-authentication-like-the-default-creds-on-netgears-website\/","title":{"rendered":"Netgear router flaws exploitable with authentication … like the default creds on Netgear’s website"},"content":{"rendered":"

Two arbitrary code execution vulnerabilities affecting a number of Netgear routers aimed at small businesses have been patched following research by Immersive Labs.<\/p>\n

The vulns rely on authenticated access to affected devices so aren’t an immediate threat. They do, however, allow someone with remote access to the router to pwn the device’s underlying OS, threatening the security of data passing through the router.<\/p>\n

Helpfully, Netgear itself publishes default login credentials for “most” of its products on its website<\/a>. If you haven’t been into your Netgear router’s admin panel and changed these default creds, you’re at increased risk.<\/p>\n