I know the IP address. How else can I access the menu system? But thanks, anyway.

The DG834N isn't on the list of affected routers.

I know. I was just curious.

I tried the suggested URL as in bobble_bob's post and got a page of what looked like java script. After running the second URL I then got an error message from Firefox saying could not connect, so it worked for me.

The downside now is that I can't connect to the router admin interface so I'll have to leave it a few days and wait to see an announcement that an update is available so I can reboot and download it. I checked an hour or so ago and no update was shown as available then.

p.s. - further downside is that I've ended up on a gateway (+Net psb-bng04) where I am getting a lot of dropped packets while I'm trying to watch Ronnie O'Sullivan perform. I night even have to go and switch the TV on!!

Edited by longedge (Wed 14-Dec-16 20:06:39)

Luckily my R9000 seems to be unaffected.....pheeeeew

Just had a thought. Does this mean we should never trust wifi again in pubs/restaurants (even password protected ones) as they could be using unpatched Netgear routers?

You should never "trust" them anyway. Everyone is sharing the same wifi so unless you are encrypting sensitive traffic and protecting the device appropriately then you are no better off than if you were connected direct to the Internet. An unpatched router just means you are open to more people - always assume on public wifi that someone else is on the wifi trying to steal your information.

The title of this thread is ridiculous, there are vulnerabilities all of the time affecting routers. You will notice most articles state a user needs to be fooled by a phishing email or click a link on an affected device. Here, it seems as vulnerable as a user on Windows who gets fooled into clicking on an infected URL... Should we turn windows off worldwide as well?

There are vulnerabilities just as bad as this one on Cisco devices used in the corporate world.

Edited by ukhardy07 (Thu 15-Dec-16 17:28:24)

I never do, but certain apps on your phone are autosign in, so assume that sensitive data is being passed as soon as you open it?

Guess with alot of Windows ones you have a chance of knowing about it through your AV going nuts. This one the user could be unaware