This firmware resolves an issue that was discovered on the Actiontec WEB6000Q with a firmware number lower than the 1.1.10.20a.t firmware. The issue was that the admin login session cookie was insecurely generated making admin session hijacking possible. When an admin logged in to the unit, a session cookie was generated using the time of day rounded to 10ms. Since the web server returned its current time of day in responses, it was possible for an attacker to step backward through possible session values until a working one was found. Firmware versions after 1.1.10.20 starting with 1.1.10.20a.t securely randomize the session cookie eliminating this attack vector.
NOTES:
Be sure to make note of any custom settings before upgrading your unit.
Mac users using Safari may need to disable the 'Open 'safe' files after downloading' option before downloading this file.
Actiontec Electronics will not provide a refund or replacement, for products that have failed due to the loading of incorrect firmware or the testing of custom firmware.
(To identify your Actiontec product, look for the model number. It is located on the FCC sticker, found on the bottom or back of the product. Typically the model number is in the sticker's upper right-hand corner.)
This Firmware Upgrade (1.1.10.20re) is for the NCS WEB6000Q ONLY. It is not to be used on any other model. This is an NCS (Non-Customer Specific) Firmware and is not intended as an Upgrade for ANY ISP Specific Firmware, regardless of version number. Therefore, you should not load an NCS Firmware Upgrade on to a device that currently has an ISP Specific Firmware installed. The reverse is also true. You should not load an ISP Specific Firmware Upgrade on to a device that currently has an NCS version installed. These types of upgrades frequently result in a nonfunctional device.
Clicking the link below will initiate the download, and at the prompt 'Do you want to run or save this file?' select 'Save'. At the following 'Save As' dialog, be sure to select a familiar location to save the file, like 'My Documents' or the 'Desktop', so that the file will be easy to find later.
Please download and read the firmware upgrade instructions below before proceeding.
Click the link below to download the firmware