NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
gHiDoRa
Oct 17, 2017Aspirant
KRACK WPA2 Wi-Fi flaws
Does Orbit effect by this?
Steven_Belfast
Oct 17, 2017Apprentice
Yes
Orbi WiFi Systems:
RBS50 running firmware version 2.0.0.74 or earlier
RBS40 running firmware version 2.0.0.56 or earlier
RBW30 running firmware version 2.0.0.34 or earlier
https://kb.netgear.com/000049498/Security-Advisory-for-WPA-2-Vulnerabilities-PSV-2017-2826-PSV-2017-2836-PSV-2017-2837
Orbi WiFi Systems:
RBS50 running firmware version 2.0.0.74 or earlier
RBS40 running firmware version 2.0.0.56 or earlier
RBW30 running firmware version 2.0.0.34 or earlier
https://kb.netgear.com/000049498/Security-Advisory-for-WPA-2-Vulnerabilities-PSV-2017-2826-PSV-2017-2836-PSV-2017-2837
- aazOct 18, 2017Virtuoso
Nevermind the Orbi, it's easily remedited by turning off FAST roaming at least until the issue is fixed in firmware - it's really all your other devices that connect via wifi that you need to worry about.
- rhester72Oct 18, 2017Virtuoso
That has not been confirmed. It is still unknown for certain whether satellite-to-router connectivity can be compromised.
- st_shawOct 18, 2017Master
According to the Netgear advisory linked by Steven_Belfast above:
1. Your devices are only vulnerable if an attacker is in physical proximity to and within wireless range of your network.
2. ...satellites are affected during a WPA-2 handshake that is initiated only when connecting or reconnecting to a router.
Based on that, you are only vulnerable if someone is at your location and only when the satellites reconnect. That sounds like a small exposure to me.
What's not clear, though, is whether clients connecting to Orbi are affected if the clients are patched but Orbi is not.