NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
KRACK Vulnerabilities
Does the latest firmware fix any of the below vulnerabilities?
CVE-2017-13077, 13078, 13079, 13080, 13081, 13082, 13084, 13086, 13087, 13088
If not, when will firmware be released to fix these?
30 Replies
Agreed - is a patch in the works? Hoping you won't ignore us.
FYI: I heard Microtik has a fix in their latest firmware.
For those of you who are unaware, below is a link to the vulnerability details. Basically, if you're using WPA2 encryption, which almost everyone is, you're vulnerable. Yowsa.
https://betanews.com/2017/10/16/krack-wpa2-security-vulnerability/
Ubiquiti are also releasing a patch. I belive that they have one available on beta test. I've been trying to get my manager to move to Ubiquiti for a while, this could push us..
I also added a note to their IdeaBoard:
Give it a thumb up and get their attention?
I have the Netgear Nighthawk R6900.
I just ran the routerlogin.net based update check and it gave me V1.0.1.28_1.0.21 firmware. Then it said this is the latest firmware available. Does this firmware have the fix for KRACK?
Thank you very much.
NETGEAR is aware of the recently publicized security exploit KRACK, which takes advantage of security vulnerabilities in WPA2 (WiFi Protected Access II). NETGEAR has published fixes for multiple products and is working on fixes for others. Please follow the security advisory for updates.
NETGEAR appreciates having security concerns brought to our attention and are constantly monitoring our products to get in front of the latest threats. Being pro-active rather than re-active to emerging security issues is a fundamental belief at NETGEAR.
To protect users, NETGEAR does not publicly announce security vulnerabilities until fixes are publicly available, nor are the exact details of such vulnerabilities released. Once fixes are available, NETGEAR will announce the vulnerabilities from NETGEAR Product Security web page.
Heads up that Windows, macOS, iOS, watchOS, and tvOS have already been patched as of last Tuesday.
Netgear - why, after about 2 months, is this not patched across current routers? Is it just a developer capacity issue? I could understand that... just not clear on the blanket "we're aware of it" statement. Anything we can do to help?
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
