The NETGEAR genie application prior to 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs.
netgear genie