Krack Attack: Weaknesses in Encryption

In the past few hours, news about vulnerable Wi-Fi networks have made users and manufacturers unsure. It has been reported that there are serious weaknesses in the WPA2 security standard.

According to Heise, security researchers found dangerous security gaps in the encryption protocol WPA2, which is used to secure Wi-Fi hotspots. Through the attack, which was dubbed 'KRACK', attackers are supposed to be able to break, tap and manipulate WPA2, warned several security researchers.

Attackers Need to Be in Close Vicinity

However, for attacking one would have to be in close vicinity or within range of the wireless signal. It is not possible to just connect to wireless networks at will via Internet and perform these attacks. This limits the potential harm of this flaw considerably.

UBIQUITI

Ubiquiti commented that the AC and M series are apparently not affected, there will still be updates for the devices within the next few days.
You can follow the current status in the manufacturer's forum:
https://community.ubnt.com/t5/airMAX-General-Discussion/WPA2-broken-with-KRACK/m-p/2099981#M70470

To install the updates, Ubiquiti has provided the following guide:
https://ubnt.us8.list-manage.com/track/click?u=bc856e62a9254399365d0277b&id=29e448f05f&e=514d020af0

MIKROTIK

MikroTik already published a statement and updates on Monday. If you routinely update your MikroTik device, no further measures are necessary.
https://forum.mikrotik.com/viewtopic.php?f=21&t=126695

OPNSENSE

There also is a statement in the OPNsense forum and an update will probably be published on Thursday.
https://forum.opnsense.org/index.php?topic=6183.

Turris Omnia

Turris Omnia already fixed the problem but warned that it's possible you won't be able to connect to the Wi-Fi network after the update. In this case, the device just needs to be rebooted.
https://forum.turris.cz/t/3-8-4-in-rc-with-krack-fix/5381

Teltonika, ALFA Networks

After consulting with Teltonika and ALFA Networks, updates will also be provided for these products within the coming hours.

For queries or assistance with the implementation of these important updates, please do not hesitate to contact us.