DHS warns against using some Netgear routers (server, installed, camera)

[NHDave]

As I said in my previous post "That more applies if you're feeding the firmware file from a computer. With the method I mentioned the router is doing the downloading, doing it using wireless through the router interface is fine."

If you use the router interface you don't need to manually download the update to your computer, the router downloads it directly, thus there is no need for a wired connection. If you have your heart set on doing it the way you mentioned (the hard way), a hardwire is a good idea.

[LIcenter]

Okay, now I gotcha! I owe you another rep in the near future.

[LIcenter]

Now that was painless! Thank you NHDave.

[thecoalman]

Originally Posted by NHDave

The routers are vulnerable to a simple phishing attack, it seems.

This is little bit more just a regular old phishing attack:

https://www.helpnetsecurity.com/2016/12/12/flaw-netgear-routers-hijacking/

The vulnerability allows execution of Linux commands by simply appending the command to a URL. The commands execute with root privileges (god mode for not tech people). This can be used to pop a telnet session, FTP, command your router to attack other computers, or pretty much anything else the malicious user wants to do.

<img scr="http://example.com/page.php?attack=< SCRIPT>do(“attack daves router”)< /SCRIPT>" >

That's an XSS attack and a site like this would not parse that URL because VB is looking for it.

While on the topic that is also why forms expire on a site, the form is issued with token so this does not work:

<img scr="http://example.com/posting.php?username="Dave"&topic_text="you are all idiots" >

[NHDave]

And this isn't the first time routers have been targeted, and it won't be the last. There was a piece of malware called DNSChanger that was widespread on Windows computers back in 2012. It has been retooled to now target routers.

https://threatpost.com/dnschanger-ex...owsers/122539/

DNSChanger Malware is Back! Hijacking Routers to Target Every Connected Device

[LIcenter]

Sit tight Dave. I'm gonna snail mail you my response.

[NHDave]

Originally Posted by LIcenter

Sit tight Dave. I'm gonna snail mail you my response.

LOL. 3 key things one can do to mitigate their risk, make sure remote management is turned off, keep the firmware up to date, and for the love of all that is holy change the password for the management interface, that's the most important one but few people do it because they aren't aware it even exists or don't give it a second thought.

I have remote management enabled, but it's set up so it can only be accessed from the IP address of my work computer.

[LIcenter]

Is there a way to set up automatic updates?

[NHDave]

Originally Posted by LIcenter

Is there a way to set up automatic updates?

Not that I'm aware, some routers might have it, but I wouldn't use it. As with Windows, android, and anything else that gets regular updates I don't install them immediately. I wait at least 2-4 weeks and let other people be beta testers.

[LIcenter]

Makes sense.