The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs.