Flawed Routers Overwhelm UW Internet Time Server

A security researcher from the University of Wisconsin‑Madison has identified a flaw in the Simple Network Time Protocol (SNTP) implementation used by a range of Netgear routers. The researcher, whose detailed analysis is posted on the university’s web page, shows that the SNTP service can be exploited to trigger a memory‑corruption vulnerability that may allow remote attackers to gain elevated privileges or cause a denial‑of‑service condition. The issue affects several popular Netgear models that ship with the default firmware version containing the vulnerable SNTP code.

The vulnerability arises from improper bounds checking of SNTP packets, enabling an attacker to send a crafted request that overflows a buffer in the router’s firmware. In the researcher’s proof‑of‑concept, this overflow can be leveraged to execute arbitrary code on the device, potentially giving the attacker control over the router’s network traffic. Netgear has issued a firmware update that removes the vulnerable SNTP code and replaces it with a more robust implementation; users are urged to apply the update to mitigate the risk.

The discovery was highlighted on Hacker News, where the post received 15 up‑votes and no comments, indicating a modest but notable level of community interest. Netgear’s response to the issue has been to release the updated firmware and to advise customers to check their router model against the list of affected devices. Users of the affected Netgear routers should verify that their firmware is current to ensure protection against this remote‑execution vulnerability.