This Netgear Orbi firmware update actually locked out users

NBR750 Front & Back
(Image credit: Netgear Inc.)

Netgear has finally released a fix for a broken update that locked people out of some of their devices and forced them to commit to a factory reset.

In late April 2022, the networking gear manufacturer released firmware update 4.6.8.2 for a number of Orbi devices (RBR750, RBS750, RBR850, and RBS850), as well as mesh Wi-Fi systems. However, the update seems to have messed things up, as users soon started reporting being unable to connect to their router’s admin console, both via the web browser, and the Orbi app. 

The device still worked, as pinging the device got a response. However, being locked out of the device means users were no longer able to make any configuration changes.

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022end of this survey

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022. Help us find how businesses are preparing for the post-Covid world and the implications of these activities on their cybersecurity plans. Enter your email at the end of this survey to get the bookazine, worth $10.99/£10.99.

Pulling the update

It took Netgear two weeks to acknowledge the mess up. In mid-May, the company released an announcement: "We are aware of an issue affecting the Orbi RBK85x and RBK75x Series Mesh WiFi 6 Systems," it said.

"Some customers can no longer access or manage their Orbi systems through the Orbi app or the web user interface. A factory reset usually resolves this issue. We are working to understand the root cause and identify an alternative recovery method that doesn't require a factory reset."

Roughly at that point, Netgear even pulled the firmware update altogether, preventing further exacerbation of the issue. After that, a new patch was gradually rolled out. 

The patch seems to have fixed the problems: "Christine here from NETGEAR. I am reaching out to confirm u/mary55330 message and note that we have had a lot of positive feedback that this fix does in fact recover the ability to access the router settings via the app and web user interface," a Reddit post by a Netgear support member reads.

Not all users will get the fix immediately. For those that cannot wait, there is a solution:

"We will be deploying the fix to the general audience in the very near future so you're welcome to wait. For those who may not want to wait, please send me your serial number via direct message and I'll have the fix rolled out to you promptly."

Netgear did not explain what caused the issues in the first place.

Via: BleepingComputer

TOPICS

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
cables going into the back of a broadband router on white background
Netgear urges users to patch major router security issues now
Cyber-security
Juniper Session Smart routers have a critical flaw, so patch now
China
Juniper patches security flaws which could have let hackers take over your router
The Meta Quest 3 and its controllers on a table next to a plant pot with a green fern in and a gold lamp
Some Meta Quest headsets are being bricked by a software update – but a fix is rolling out
Security
Zyxel says it won’t patch security flaws in its old routers
Google Chromecast 2
Google rolls out another Chromecast bug fix for users who factory-reset their devices
Latest in Pro
cybersecurity
What's the right type of web hosting for me?
Security padlock and circuit board to protect data
Trust in digital services around the world sees a massive drop as security worries continue
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS)
This top WordPress plugin could be hiding a worrying security flaw, so be on your guard
construction
Building in the digital age: why construction’s future depends on scaling jobsite intelligence
Latest in News
Ray-Ban Meta Smart Glasses
Samsung's rumored smart specs may be launching before the end of 2025
Apple iPhone 16 Review
The latest iPhone 18 leak hints at a major chipset upgrade for all four models
Quordle on a smartphone held in a hand
Quordle hints and answers for Monday, March 24 (game #1155)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Monday, March 24 (game #386)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Monday, March 24 (game #652)
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 23 (game #1154)