Announcements

Polls
What is your Experience with NETGEAR Insight cloud management?
Top Contributors

Patch for Krack Vulnerability

ALL FIRMWARE should be updated. More info: https://betanews.com/2017/10/16/krack-wpa2-security-vulnerability/

36 Comments

Thanks, NETGEAR Team, for doing the right thing and supporting the R7000

https://kb.netgear.com/000052576/R7000-Firmware-Version-1-0-9-14Robot Very Happy

Onlooker

Yes this is great there is an update!

However, can we get confirmation that thi fixes the KRACK exploit? Every other patch mentions it by name - this one doesn't. Thanks!

Apprentice
The R7000 appears to be patched for KRACK exploit, NETGEAR lists it as vulnerable only for firmware version 1.0.9.12 and below. https://kb.netgear.com/000049498/Security-Advisory-for-WPA-2-Vulnerabilities-PSV-2017-2826-PSV-2017-...
Aspirant
R7900 with firmware 1.0.3.8_10.0.37 will it fix KRACK I have a Netgear Nighthawk X6 R7900 router and am using firmware version 1.0.3.8_10.0.37 DOSES THIS VERSION OF FIRMWARE FIX THE PROBLEMS CREATED BY KRACK? If it does not fix KRACK what can I do to work around the problem? I have seen Security Advisory for WPA-2 Vulnerabilities PSV-2017-2826, PSV-2017-2836 https://kb.netgear.com/000049498/Security-Advisory-for-WPA-2-Vulnerabilities-PSV-2017-2826-PSV-2017-... The listings do not show R7900 I am using my router in BRIDGE MODE Is firmware V1.0.3.8_10.0.37 sufficient to solve the KRACK problem?
Apprentice
A paper presented in October 2018 by those that discovered the original KRACK 2016 vulnerability discloses that previous patches are both at least in part ineffective and that attacks are far easier to successfully perpetuate than originally thought. https://papers.mathyvanhoef.com/ccs2018.pdf. At least one package, wpa_supplicant up to version 2.6, IS vulnerable to KRACK. The most recent version of wpa_supplicant is 2.7, was released December 2nd 2018, but I am not certain that this version is patched for the latest KRACK exploits. But any firmware released before December 2nd 2018 definitely DOES NOT counter KRACK. Your firmware date is 10/17/2018. So no, your firmware is not patched for KRACK. Will start a new thread on this if anyone is interested or curious as to how NETGEAR responds, if it does, to what I'll call KRACK 2018.
Aspirant
TacoFeline: Please continue with KRACK 2018