| NETGEAR R7000 (R7000)
|
|
Security Grade
Calculator v1
|
Nighthawk R7000 AC1900 Smart WiFi Router
Release Date: 2013-10-01 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Provisional rating: accessible reset, USB and network ports create physical exposure. Tamper resistance and attack frequency were not independently measured.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
CVE-2021-40847 is vendor-confirmed remote code execution. Fixed R7000 firmware: 1.0.11.128; the advisory does not enumerate a full affected lower-version range. Rare is qualitative, not a measured prevalence.
|
| Prior attacks
|
Rare
|
🔗 Proof
|
NETGEAR lists R7000 among models affected by VPNFilter malware. Rare is a qualitative categorization of documented incidents, not a measured infection rate.
|
| Updatability
|
Rare
|
🔗 Proof
|
Vendor released a specific historical security fix and offers a model-specific update path. Rare is conservative; current support lifetime and patch cadence were not established.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Wi-Fi and administrator credentials provide interface-specific authentication. Partial reflects incomplete verification of all services and historical security weaknesses.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
The manual documents WPA2-PSK with AES. This rating is scoped to properly configured WPA2 Wi-Fi; it does not establish encryption of every management or WAN connection.
|
| Storage
|
No encryption
|
🔗 Proof
|
Conservative provisional score: internal flash and attached-drive encryption at rest were not verified. No encryption is an assessment assumption requiring review, not a confirmed plaintext finding.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Administrator settings, guest network and file-sharing access controls exist. Basic does not claim complete role separation or enterprise identity management.
|
| Authentication
|
Basic
|
🔗 Proof
|
Password-based administration is documented. MFA, modern password hashing and current firmware-specific policy were not established.
|
| Brute-force protection
|
Basic
|
🔗 Proof
|
Official FAQ documents temporary WPS-PIN lockout after failed attempts. Basic is limited to that verified surface; administrator-login rate limiting was not established.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Activity logs and security-event email are documented. Partial does not claim all security events are recorded, immutable or centrally audited.
|
| Passwords
|
Default/Common/Easy to guess
|
🔗 Proof
|
The historical 2019 manual documents admin/password factory administrator credentials and a password-change function. This rating describes that documented baseline, not a guarantee that current firmware still permits unchanged defaults.
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
(Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity:
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Desk-based assessment dated 2026-10-25; no hands-on testing. Scope: NETGEAR R7000, not R7000P. Historical vulnerable releases and the vendor fixed release are distinguished; use the latest exact-model firmware.
Release date 2013-10-01 is the NETGEAR launch-announcement date, not a claim of same-day sale in every region. Unpublished properties are explicitly provisional inferences because the form lacks Unknown.
References:
