Mas información sobre sobre vulnerabilidad “Key Reinstallation Attacks (KRACKs)”

Si bien ayer informabamos de la peligrosa vulnerabilidad en el protocolo WPA2 “Key Reinstallation Attacks (KRACKs)” , segun puede verse en :

tocolo-wpa2-key-reinstallation-attacks-kracks/

hoy avisamos que SONICWALL nos informa que algunos de sus productos no se ven afectados por dicha vulnerabilidad, segun puede verse en comunicación adjunta:

“SonicWall Capture Labs ha evaluado estas vulnerabilidades y ha determinado que nuestros puntos de acceso inalámbricos SonicPoint y SonicWave, así como nuestros firewalls inalámbricos TZ y SOHO, no son vulnerables a las fallas en WPA2.”

________

Product Notice: Investigating the KRACK Attack

On Monday, a critical vulnerability in the WPA2 wireless security protocol was published by Dutch researchers. KRACKs — or key reinstallation attacks — can theoretically be deployed by attackers to steal sensitive information from unsuspecting wireless users leveraging flaws in the Wi-Fi standard.

The SonicWall Capture Labs investigated the WPA2 vulnerabilities and found the following:
SonicPoint and SonicWave wireless access points, as well as SonicWall TZ and SOHO wireless firewalls, are not vulnerable to KRACK attacks.
No updates are needed for SonicWall wireless access points or firewalls with integrated wireless.
Attackers must be in physical proximity to the wireless client or access point to execute a KRACK-based man-in-the-middle (MITM) attack.
According to our records, none of the SonicWall appliances you own have wireless capabilities or employ the WPA2 security protocol. No firmware updates are required.

However, for guidance on how to minimize the risk presented by vulnerabilities via wireless clients from other vendors, please read “Are There KRACKs in Your Wireless Network Security?” which will be continually updated.
LEARN MORE ABOUT KRACK

Should you have further questions or need assistance, please contact your preferred SonicWall reseller or SonicWall support.

________

Aparte, ofrecemos información soibre otros productos que sí que se ven afectados por dicha vulnerabilidad, y las actualizaciones ya disponibles para ellos.

https://www.bleepingcomputer.com/news/security/list-of-firmware-and-driver-updates-for-krack-wpa2-vulnerability/

y traducido con el Google Translate:

Es muy importante que, en los productos que haya disponible actualizaciones, se apliquen para evitar el problema indicado.

saludos

ms, 18-10-2017