[testTED]

You kept the router?

Did you at least flash it?

[omgwtfbyobbq]

Yup. That's what the "fixed by an update" part referred to.

[testTED]

There's a difference between pressing "update" in a known-compromised device's webUI, and flashing it from the outside.

[omgwtfbyobbq]

The advisory stated affected devices could be update through the device UI.

https://kb.netgear.com/000061982/Security-Advisory-for-Multi...

But if it didn't, then that's another can of worms.