CSCvf47808 - Key Reinstallation attacks against WPA protocol - 10

[fflanca]

Hi,

I have a pair of 1252AG in a point to point wireless bridge setup, they are running 15.2(2)JA1. Are them affected to this vulnerability?

Thanks in advance.

[Rich Uline]

Fflanca,

The WPA2 Security Advisory lists the 1250 series APs as vulnerable to CSCvf47808. So, unfortunately, you are affected.

[Aaron]

Actually, an AP is susceptible only if 802.11r is enabled. ("authentication key-management wpa version 2 dot11r" configured under the SSID.) This wasn't even supported back in 15.2(2)JA1, so you're clear :)

Aaron

[fflanca]

Hi,

Thank you very much, I was trying to determine if the APs (15.2(2)JA1) supported 802.11r or not:

>From the CSCvf47808:

"Conditions:
Exposure to CVE-2017-13082 is only possible if 802.11r(ft) is use (Enabled or in Adaptive mode)"

Best regards