Meraki APs and the AirSnitch vulnerability?

[Cryptopher]

Are Cisco Meraki Wi-Fi access points vulnerable to the recent AirSnitch vulnerability? Can Meraki's Air Marshal feature help mitigate AirSnitch?

[Tony-Sydney-AU]

Hello @Cryptopher ,

Thanks for bringing this recently found vulnerability.

As you know, Cisco take security very seriously and as such, our Internal Teams are working on it.

We'll update our community soon.

In the meantime, just keep an eye on Cisco Security Advisories and filter by Meraki product family. This still is one of the best ways to be informed and updated.

[aneduzhk]

Cisco is actively preparing a response to the whitepaper, "AirSnitch: Demystifying and Breaking Client Isolation in Wi-Fi Networks." We anticipate sharing our response within the next week.

At this time, there is no security advisory planned because AirSnitch does not represent a protocol-level vulnerability, such as KRACK or Dragonblood. Additionally, the referenced paper does not introduce new or original findings. This research indicates that the attack leverages fundamental Wi-Fi architectural behaviors that have been part of the standard for a considerable period.

Customers that already adhere to ZTA principals would not be affected.

[Raphael_L]

100% subscribing to this thread.

This is going to land on my desk in a moment I'm pretty sure.

[aneduzhk · Accepted solution]

Here is the response - https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/225587-review-and-recommendations-for.html It applies for both on-prem and cloud-managed APs.