Netgear router vulnerabilities could let attackers ‘roam untethered through an entire organization’
Vulnerabilities in Netgear routers opened the gates for attackers, according to Microsoft.
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
What you need to know
Microsoft disclosed several vulnerabilities to Netgear routers that could allow attackers to “roam untethered through an entire organization,” according to the Microsoft 365 Defender Research Team. Apostfrom that team breaks down the vulnerabilities. The vulnerabilities were patched before they were disclosed publicly.
There are three bugs that affect Netgear DGN-2200v1 series routers that are running firmware lower than v1.0.0.60. Microsoft’s staff noticed the bugs due to an “odd behavior:”
A device owned by a non-IT personnel was trying to access a NETGEAR DGN-2200v1 router’s management port. The communication was flagged as anomalous by machine learning models, but the communication itself was TLS-encrypted and private to protect customer privacy, so we decided to focus on the router and investigate whether it exhibited security weaknesses that can be exploited in a possible attack scenario.
Microsoft explains that the first issue allows for a “complete and fully reliable authentication bypass.” This is due to the issue allowing an attacker to access any page on the vulnerable device.
The second issue allows for a side-channel attack that can be used to get authentication credentials.
The final issue allows attackers to gain access to secrets stored in the device. “After some preparatory steps, the contents are DES-encrypted with a constant key “NtgrBak,” explains Microsoft. “This allows an attacker to get the plaintext password (which is stored in the encrypted NVRAM) remotely. The user name, which can very well be variations of ‘admin’, can be retrieved the same way.”
The critical issues have been fixed by Netgear already. The company outlines the fixes in more detail in arecent post.
Get the Windows Central Newsletter
All the latest news, reviews, and guides for Windows and Xbox diehards.
Sean Endicott is a tech journalist at Windows Central, specializing in Windows, Microsoft software, AI, and PCs. He’s covered major launches, from Windows 10 and 11 to the rise of AI tools like ChatGPT. Sean’s journey began with the Lumia 740, leading to strong ties with app developers. Outside writing, he coaches American football, utilizing Microsoft services to manage his team. He studied broadcast journalism at Nottingham Trent University and is active on X @SeanEndicott_ and Threads @sean_endicott_.
