US cyber-security firm Trustware discovered five security issues affecting 17 Netgear router models. The issues were discovered and privately reported in March 2017 via Netgear’s bug bounty program. The hardware vendor slowly patched and issued updates for all five flaws during the course of last year. Trustware has gone public with its findings last week, in the hopes that users who did not upgrade their router’s firmware will now take the time to visit NetGear’s site and download firmware updates. The vulnerabilities include Password Recovery and File Access, Post-Authentication Command Command, and the Nighthawk router series.
Source: https://www.bleepingcomputer.com/news/security/security-updates-available-for-popular-netgear-routers/