CSCvf96789%20-%20Key%20Reinstallation%20attacks%20against%20WPA%20protocol%20-%201

[Abramham_Nestor]

When will there be an update? This product is still being sold.

CISCO hurry up please.

[Leo Laohoo]

Just a reminder that this vulnerability affects anything with a wireless NIC. It's not just wireless AP but also wireless clients as well.

Patching the AP will only fix one of ten vulnerabilities (CVE-2017-13082 or 802.11r).  

Patching the client will fix 9 out of 10 vulnerabilities but not CVE-2017-13082. 
 

[Leo Laohoo]

Software fix for the KRACK vulnerability is now available for download. They are 8.0.152.0, 8.2.164.0, 8.3.132.0 and 8.5.105.0.

[mattpstanding]

Any got download links?

[Leo Laohoo]

---

@mattpstanding wrote:

Any got download links?

---

Go HERE and look under "Latest".

[Leo Laohoo]

---

@mattpstanding wrote:

Any got download links?

---

A quick update to anyone reading this thread and intending to upgrade to 8.3.132.0:
Cisco TAC has recommended anyone to HOLD OFF upgrading to 8.3.132.0. TAC has identified a Severity 1 bug which causes the controller to crash after upgrading to 8.3.132.0.
There are no reported issues in regards to other versions.