Netgear 0-day vulnerability analysis and exploit

Re:Netgear 0-day vulnerability analysis and exploit by theincredulousk on Tuesday June 16, 2020 @12:15PM (#23540896)

Get an enterprise router/firewall.

Also most of these vulnerabilities (as the article points out) are in the web server. If the web server isn't exposed,it isn't of much practical security concern.

I've also run DD-WRT for years with excellent results. Per the usual benefits of open source and active maintainers, it is generally going to (a) have the trivial stuff already addressed (b) keep up to a reasonable extent with security patches.

[ Parent | on HN ]

Re:Netgear 0-day vulnerability analysis and exploit by user5994461 on Tuesday June 16, 2020 @01:21PM (#23541622)

>>> Get an enterprise router/firewall.

I would have said the same some time ago, working in networking in a world largely made up of Cisco.

But then a few major vulnerabilities later and blog posts disclosing vulnerabilities that they refused to acknowledge when contacted. Then I'm not sure paying for enterprise equipment is a solution anymore.

[ Parent | on HN ]