Using Netgear router?

Using Netgear router?

According to US-CERT, Netgear routers are vulnerable to command-injection attack that allows hackers to take control of the devices and their internet connections. Netgear models R7000, R6400, and R8000 have been confirmed to be vulnerable, and models R7000P, R7500, R7800, R8500 R9000, have been reported as being affected.

US-CERT states, that “Exploiting this vulnerability is trivial”, thus, experts advise to turn off vulnerable and affected routers to stay safe until a fix is made available. Netgear confirms that they will fix the problem with new firmware being released within a few days.

In fact, users are not able to discover whether they are being attacked or not. However, US-CERT confirms that users with affected models are able to hack into their router, thus, they will not be vulnerable to the exploit anymore.

This temporary fix involves a single click on a link http://[router-address]/cgi-bin/;killall$IFS’httpd’, where [router-address] is swapped with the local IP address assigned to your router. The internal Web the router uses to receive incoming commands will be disabled by this command and the router will work normally. However, this temporary fix will be effective until the router will be rebooted. This quick-fix was published by Acew0rm.