CSCvf96789 - Key Reinstallation attacks against WPA protocol WAP321

Sporto · ‎10-17-2017

Knowing this unit has not seen an update for an eternity by technology standards, will it receive an update to address this problem? We have many in service and I am sure we are not the only ones still using it.

PLEASE NOTE: The post below by Leo is NOT for WAP321 units. It is not relevant to this conversation at the moment. Thank you for your input regarding the other units it does relate to however. :-)

renewals1 · ‎10-17-2017

I would hope so given that these units along with the smaller 121's are still being actively sold!

Richard Stevens · ‎10-18-2017

Yup we got a lot of them. It seems the only option we have is giving customers the option to turn them off right now, and erm.... wait and see if Cisco give us a date for a fix.

Not inspiring a huge deal of confidence.

mattpstanding · ‎10-18-2017

We have a few dotted around the estate and have had to turn them off until a patch is released. We are also actively looking at alternative vendors to replace the 321s.

Cisco, any update on a patch or whether there is going to be a patch??

Leo Laohoo · ‎10-23-2017

Software fix for the KRACK vulnerability is now available for download. They are 8.0.152.0, 8.2.164.0, 8.3.132.0 and 8.5.105.0.

Richard Stevens · ‎10-23-2017

@Leo Laohoo wrote:
Software fix for the KRACK vulnerability is now available for download. They are 8.0.152.0, 8.2.164.0, 8.3.132.0 and 8.5.105.0.

Latest I'm seeing is 1.0.6.5 (2016) anyone have a location for this new one?

Leo Laohoo · ‎10-23-2017

Look under "All Releases".

Richard Stevens · ‎10-23-2017

These apply to a cisco 321?

Leo Laohoo · ‎10-23-2017

Go HERE and look under "Latest".

Richard Stevens · ‎10-23-2017

I definitely don't see wap321 listed.

Leo Laohoo · ‎10-23-2017

Mea culpa. Release for WAP321 is yet to be announced.

Richard Stevens · ‎10-23-2017

Awesome, I'll get back to turning them off then.

Richard Stevens · ‎10-26-2017

OK what's everyone replacing them with? I understand TP-link are patching.

mattpstanding · ‎10-26-2017

Hey CISCO,

What is happening with these? I see that they are supported until 2022:

https://www.cisco.com/c/en/us/support/wireless/wap321-wireless-n-selectable-band-access-point-single-point-setup/model.html#~tab-community

When can we expect an update to patch the WPA2 issue?

blobs · ‎10-30-2017

Hi Cisco,

We need a firmware patch for Cisco WAP121! ASAP!