Netgear releases preliminary patch for three vulnerable routers

Netgear has released a temporary patch for router models with a vulnerability that could allow an attacker to execute arbitrary code. However, the company advises users to wait for the stable versions of the patches.

The temporary beta patches are available for the R6400, R7000 and R8000 models, Netgear said. It writes that some stable patches should be released during Tuesday. They will be added to the support page. In addition, the company reports that the leak affects a total of eight router models, namely the R6250, R6700, R7100LG, R7300 and R7900 in addition to the models already mentioned. Netgear states that the possibility exists that more routers are affected.

The vulnerability in the router software allows an attacker to run arbitrary root code on the devices, for example by having a victim visit a malicious site. Pending a stable patch, an unofficial workaround is also available that disables the web server process on the routers so that they are no longer vulnerable.