​​​​​​Wi-Fi Security Vulnerability – Update

Please note, attacks can be performed against clients and network infrastructure components.  It is critical to update both client devices and wireless infrastructure.

Affected/Notified Vendors and Manufactures:

CERT Vendor Information for VU#228519
https://www.kb.cert.org/vuls/byvendor?searchview&Query=FIELD+Reference=228519&SearchOrder=4

Microsoft Corporation
Updates available – Silent release in Oct 10th patch
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080

Cisco
Updates available for specific hardware and IOS versions
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa

Aruba Networks
Updates available
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt

Extreme Networks
Updates expected Oct 20th
https://extremeportal.force.com/ExtrArticleDetail?n=000018005

Intel Corporation
Updates available
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00101&languageid=en-fr

Juniper Networks
Updates available
https://kb.juniper.net/JSA10827

Netgear
Updates available for select hardware models
https://kb.netgear.com/000049353/WAC120-Firmware-Version-2-1-5

Google / Andriod
Updates expected on November 6th.

Apple
Updates in Beta, expected in coming weeks

Toshiba Electronic Devices & Storage Corporation
Updates expected on or before November 30th
http://support.toshiba.com/support/staticContentDetail?contentId=4015875&isFromTOCLink=false

Ubiquiti Networks
Updates available
https://community.ubnt.com/t5/UniFi-Updates-Blog/FIRMWARE-3-9-3-7537-for-UAP-USW-has-been-released/ba-p/2099365

Watchguard Technologies, Inc.
Updates available for Cloud products.  additional updates expected on Oct 30th
https://www.watchguard.com/wgrd-blog/wpa-and-wpa2-vulnerabilities-update

rmsource recommends monitoring bulletins issued by affected vendors and applying all patches associated with WPA2 KRACK immediately upon release.