The IT security company Flashpoint has published an article in its blog drawing attention to two critical security vulnerabilities in older, discontinued NetModule router software releases.
All NetModule Router software versions from version 4.2 are not affected by these security vulnerabilities.
Why has Flashpoint detected these vulnerabilities?
According to Flashpoint, there are several devices reachable on the Internet that are still in operation with NetModule Router Software 4.1.0.102 or older.
The affected functions were already restructured in 2018 with NetModule Router Software version 4.1.0.103 to improve security; this also closed the security gaps that have only now become known.
Until the official end-of-life in March 2021, NetModule has released a total of 10 version 4.1 updates with security and stability improvements during the last 3 years. For the supported software versions, NetModule proactively publishes security advisories that can be easily subscribed to.
Subscribe to the NetModule Newsletter
This example shows the importance of keeping the NetModule Router Software up to date for secure operation and not using discontinued releases.
We recommend that all customers update devices with NetModule Router Software 4.1.0.102 or older to a current, supported version as soon as possible: https://www.netmodule.com/en/support/downloads/device-software-manual