Netgear vulnerability exposed TLS certificates to public

guest · Jan 25, 2020

Netgear vulnerability exposed TLS certificates to public
January 24, 2020
https://www.hackread.com/netgear-vulnerability-exposed-tls-certificates-to-public/

Recently Netgear, a computer networking company was found to have vulnerabilities in the firmware of its wireless routers. The report was made by Nicholas Starke who is a threat researcher at Aruba Networks along with Tom Pohl, the head of software architecture at Businessolver.

For the unfamiliar, every Netgear device comes with a minimum of two running signed TLS certificates. The private keys of these could be used to decrypt any traffic passing through that device and hence would naturally put the user at risk exposing all of their traffic.
Furthermore, these keys could be downloaded from Netgear’s support website without any authentication measures in place making it an open house.

The models compromised include R8900, R9000, RAX120 and XR700 wireless routers. Due to no patch having been released yet despite a response by Netgear on Monday, it has advised users to go with the following 2 options until the issue has been fixed: [...]
Click to expand...

It is worth noting that if exploited these keys could be used to intercept and tamper with secure connections (man-in-the-middle attacks) and essentially, any of the compromised routers can be hijacked.

Mark Thompson, VP of product management at Keyfactor told HackRead that,

“This is yet another example of manufacturers prioritizing time to market over device security. D-Link made the same mistake in 2015 when developers accidentally published keys in open-source firmware. NETGEAR should store these private keys in a secure HSM or use on-device key generation to generate the public-private key pair. [...]”
Click to expand...

Netgear: Security Advisory for Signed TLS Certificate Private Key Disclosure on Some Routers, PSV-2020-0105

2020-01-24:
• Added hotfixes for R8900 and R9000
• Added explanation of security hotfixes
• Added firmware download instructions
• Added note about security warnings related to self-signed certificates
• Clarified wording of the Workarounds section
• Added disclaimer about following NETGEAR’s recommendations

2020-01-20: Published advisory
Click to expand...

Log in or Sign up

Netgear vulnerability exposed TLS certificates to public

guest Guest

Log in or Sign up

Netgear vulnerability exposed TLS certificates to public

guest Guest

Useful Searches