NETGEAR DGN1000 vulnerable

Question

NETGEAR DGN1000 vulnerable

monga opened this issue 11 years ago · 7 comments

I can confirm the vulnerability on this model (Firmware Version V1.1.00.46_ww).

Thank you for your work.

Answer 1 · 2014-01-03T15:14:49.000Z

Thank you, I updated the list :)
Do you know if there is any difference between your router and the other DGN1000 mentionned in the readme?

Answer 2 · 2014-01-03T15:32:59.000Z

No, I don't, sorry: they are very likely to be the same. I've sent the issue message just to document also the firmware version.

Answer 3 · 2014-01-03T15:45:08.000Z

Ok, thank you :)

Answer 4 · 2014-02-14T05:12:57.000Z

Has anyone found a alternative firmware that can be applied. DD-WRT? Open WRT & Tomato don't have firmware for this router. I have tried to block the port using exiting firmware without success.

Answer 5 · 2014-04-07T19:59:39.000Z

I brought this issue up with netgear support (2014/01/17), and just in the last few days they have released a new firmware version that resolves the port 32764 issue. The new firmware is available on their website (http://downloadcenter.netgear.com/other/)

I've confirmed that the below version works correctly.
http://www.downloads.netgear.com/files/GDC/DGN1000/DGN1000-V1.1.00.49WW.zip

If the original backdoor was a planned 'feature', then its possible that there is a knocking sequence required to unlock port 32764 (that is, port 32764 opens after trying port 5000, then 8000 before 32764 as an example).

Answer 6 · 2014-04-07T20:07:25.000Z

I'll have a look, thank you :)

Answer 7 · 2014-04-07T22:45:51.000Z

Oh god :')
Expect some lolz in the next few days :)