NETGEAR Orbi Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in various NETGEAR Orbi devices. This issue enables users connected to the local network to access the router's web interface with administrative privileges. The vulnerability arises from insufficient authentication mechanisms, particularly in the handling of DHCPv6 functionality, which is not enabled by default.

Impact

Exploitation of this vulnerability allows for unauthorized access to the router's administrative interface, potentially leading to further configuration changes or management of the device.

Remediation

Users are advised to update their devices to the latest firmware version. Specific instructions for downloading the updated firmware are available on the NETGEAR support website.