Netgear has issued a security advisory for three of its routers after being made aware of a serious security vulnerability that could allow remote hackers to take control.
The vulnerability was found and reported to Netgear back in August by Twitter user Acew0rm1 but had gone unresolved with Netgear only acknowledging the flaw on the 9th December 2016.
The Netgear routers affected are the R8000 (Nighthawk x6), R7000 (Nighthawk AC1900), and R6400 (AC1750 Smart). Other routers and firmware variants may also be affected. If you have a Netgear router, we recommend keeping an eye on the Security Advisory for VU 582384 for any additional information or routers being added.
Carnegie Mellon University’s Computer Emergency Response Team (CERT) also posted information on their site about the issue and their recommendation
The CERT/CC is currently unaware of a practical solution to this problem… Exploiting this vulnerability is trivial. Users who have the option of doing so should strongly consider discontinuing use of affected devices until a fix is made available
If you have no other options and you own one of the affected routers we suggest extreme caution while browsing the Internet until a firmware update is made available.