Replacement firmware
- Hardware revision not specified
- Browse firmware downloads Beta build · 10-13-2026-r66345
- v2 · U12H224T00
- Browse firmware downloads Beta build · 10-13-2026-r66345
Router
NETGEAR WNDR4500
Projects for this device
Replacement firmware
Replace router software with a customizable system for network controls and community packages.
How to get started
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
- Setup
- Firmware replacement; route varies by router
- You’ll need
- Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
- v1 · Broadcom BCM4331 Wi-Fi
- Processor: Broadcom BCM4706Open hardware record
- v3 · Atheros AR9580 Wi-Fi
- Processor: Qualcomm Atheros QCA9563Open hardware record Release listed · 25.12.5
- v3 · Atheros AR9580 / Qualcomm Atheros QCA9563 Wi-Fi
- Get OpenWrt firmware Release listed · 25.12.6
- v3 · 2976482101
- Get firmware Release listed · 25.12.5
- v1 · Broadcom BCM4331 Wi-Fi
- Open device guide
- v3 · Qualcomm Atheros QCA9563
- Open hardware record Release listed · 25.12.5
v1 · Broadcom BCM4331 Wi-Fi
- Limitations
- Never supported
Features & details
Check the project and hardware shown for each feature.
Device details
netgear wndr4500 — device documentation (github.com)Netgear WNDR4500v1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)
- Hardware revision
- v1
Device details
netgear wndr4500 v3 — device documentation (github.com)Netgear WNDR4500v3 — WikiDevi (github.com)Device details — v3 — Source documentation (openwrt.org)
- Hardware revision
- v3
Device details
- Hardware revision
- v1
Device details
- Hardware revision
- v2
Device details
- Hardware revision
- v3
Device details
- Hardware revision
- v2
OpenWrt · v1 · Broadcom BCM4331 Wi-Fi
OpenWrt · v1 · Broadcom BCM4331 Wi-Fi — Source documentation (openwrt.org)
- Availability recorded by source
- Discontinued
OpenWrt · v3 · Atheros AR9580 / Qualcomm Atheros QCA9563 Wi-Fi
- Availability recorded by source
- Available 2020
Hardware differences
v1 · Broadcom BCM4331 Wi-Fi
- Flash chip
- Samsung K9F1G08U0D-SCB0
- Board identifier
- U12H189T00
- Processor
- Broadcom BCM4706
- Memory chip
- Samsung K4T51163Q1-HCE6
v2 · Broadcom BCM4331 Wi-Fi
- Flash chip
- Samsung K9F1G08U0D-SCB0
- Board identifier
- U12H224T00
- Processor
- Broadcom BCM4706
- Memory chip
- Winbond W9751G6KB-25
v3 · Atheros AR9580 Wi-Fi
- Flash chip
- Macronix MX25L1606EM2I-12G
- Board identifier
- 2976482101
- Processor
- Qualcomm Atheros QCA9563
- Memory chip
- Winbond W971GG6KB-25
Security
Saved scan
From our saved security research.
Model advisories
Selected highlightsPrioritized by known exploitation, severity, then date.
NETGEAR WNDR4500
Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi
- Affected firmware
- Version scope unspecified in source
- Fix
- Fix details in the linked record
Details and sources
Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.
WNDR4500
Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877 reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text
- Affected firmware
- V1.0.1.40_1.0.6877
- Fix
- Fix details in the linked record
Details and sources
There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genie_ping.htm or genie_ping2.htm or genie_ping3.htm page without authentication. Once accessed, the page will be redirected to the aCongratulations2.htma page, which reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text.