Netgear Authentication Bypass Allows Router Takeover

[fenderman]

Netgear Authentication Bypass Allows Router Takeover

Microsoft researchers discovered the firmware flaws in the DGN-2200v1 series router that can enable authentication bypass to take over devices and access stored credentials.

threatpost.com

 

[Left Coast Geek]

which is why I prefer to run an open source router like pfsense, or if I have to use a consumer router, I put OpenWRT on it.

 

[mikeynags]

Yeah because open source software never has vulnerabilities


Sent from my iPhone using Tapatalk

 

[Left Coast Geek]

Yeah because open source software never has vulnerabilities

they tend to get fixed a LOT faster. they also tend to be a lot more transparent about the vunerabilities as they are discovered, folks like netgear will keep them secret if they can.

 

[whoami ™]

pfSense+ vs. Netgear

 

[Flintstone61]

Googling pfsense

 

[Left Coast Geek]

Googling pfsense

pfSense® - World's Most Trusted Open Source Firewall

pfSense is a free and open source firewall and router that also features unified threat management, load balancing, multi WAN, and more

www.pfsense.org

its an open source firewall/router distribution based on FreeBSD. its weak spot is it does not do a very good job on wireless, so I use 'real' wireless access points, and my pfsense is just the ethernet firewall/router. I'm running pfsense on a small appliance router board known as an APU2D4, its a 4-core 1Ghz ultra-low power AMD 64 bit CPU with 4GB ram, that boots off a mSATA card and has 3 gigE ports for running different subnets.

 

[Holbs]

pfSense® - World's Most Trusted Open Source Firewall

pfSense is a free and open source firewall and router that also features unified threat management, load balancing, multi WAN, and more

www.pfsense.org

its an open source firewall/router distribution based on FreeBSD. its weak spot is it does not do a very good job on wireless, so I use 'real' wireless access points, and my pfsense is just the ethernet firewall/router. I'm running pfsense on a small appliance router board known as an APU2D4, its a 4-core 1Ghz ultra-low power AMD 64 bit CPU with 4GB ram, that boots off a mSATA card and has 3 gigE ports for running different subnets.

you gots some serious IT/electronic skillz if you dabble with that APU2D4! why no pi4? If it wasn't for my investment into my Ubiquiti setup, I would of went pfsense on either my i7-4770 NUC or Pi4

 

[Left Coast Geek]

pfsense mostly runs on x86, and I don't believe the Pi4 is a supported platform at all. anyways, it only has 1 ethernet, so how are you going to route ? USB ethernet adapters tend to be lousy performance.

also, I've had the APU 5-6 years now, rpi4's weren't even around yet. And as far as 'serious skills' ? the APU is easy to setup. hook up a serial console, boot a USB stick, install... its a x86 PC that has serial console instead of VGA.

 

[Flintstone61]

what if a guy has a couple x86 SFF boxes laying around? would it run /route on that with a 2nd nic? or not as well as a NetGate or APU?

 

[Left Coast Geek]

what if a guy has a couple x86 SFF boxes laying around? would it run /route on that with a 2nd nic? or not as well as a NetGate or APU?

yeah, that would work fine. key is decent NICs, like Intel Pro1000's... the sort of cheap Realtek nics often found on consumer PCs mainboards aren't very efficient in a router. but it also depends on your internet speeds, my cable modem can hit 800Mbps so I need gigE ports that can really maintain gigE w/o a lot of cpu overhead, the Intel chips do that nicely.

otoh, I wouldn't want a 150W desktop PC running 24/7 just as a router... the APU2 draws like 7-10 watts even when very active.

 

[whoami ™]

Googling pfsense

you could get lost for a good 6 months going straight autistic on networking with pfSense and a good switch like UniFi. Ask me how I know this. And you'll only be scratching the surface of what its capable of.

 

[weigle2]

what if a guy has a couple x86 SFF boxes laying around? would it run /route on that with a 2nd nic? or not as well as a NetGate or APU?

That's what I have done. Only exception is I installed a Intel 4-port Low Form Factor Ethernet card in it to get extra sub-nets like for WiFi access points and IOT devices. Will be transitioning over to a fanless device with mSATA and 4 ethernet ports when I get everthing worked out. There is no need for serious CPU power in a pfSense setup. A Celeron is really more than enough.

 

[SpacemanSpiff]

+1 for pfsense.

I'm all for re-using any viable system sitting in the pile of "stuff" waiting for a purpose. But at the same time, I do appreciate the simplicity of an appliance.

 

[Flintstone61]

I got an SFF optiplex 980, It can take a low profile PCI-e card. first Gen core i5 650 2 cores 4 threads. runs windows 10 just dandy on an SSD. it's roughly like 12'x 11.5' x 3.4" in high case. power supply says 235Watt. might be small, but sure has big supply for such a tiny machine.

 

[Left Coast Geek]

I got an SFF optiplex 980, It can take a low profile PCI-e card. first Gen core i5 650 2 cores 4 threads. runs windows 10 just dandy on an SSD. it's roughly like 12'x 11.5' x 3.4" in high case. power supply says 235Watt. might be small, but sure has big supply for such a tiny machine.

thats a rather old 73W tdp CPU. If this is for pfsense, I don't think that CPU has AES-NI instructions, so VPNs and anything else doing crypto will be high overhead.