is AccessPoint nwa1123-ac affected by KRACK and will receive a firmware update?

snowsail · October 2017

"KRACK (short for Key Reinstallation AttaCK) targets the third step in a four-way authentication “handshake” performed when Wi-Fi client devices attempt to connect to a protected Wi-Fi network. The encryption key can be resent multiple times during step three, and if attackers collect and replay those retransmissions in particular ways, Wi-Fi security encryption can be broken."

This affects all WPA2 implementations. Microsoft already provided a patch. All device manufacturers have already been informed the latest since 28 August 2017.

Refer to https://www.krackattacks.com/

I am aware of http://www.zyxel.com/support/announcement_wpa2_key_management.shtml but I am not sure whether this applies for my product as well.

Anyway the last Firmware update for the nwa1123-ac dates from September 2016´so I am looking forward to at least yearly updates...

#Biz_WLAN_October

snowsail · October 2017

I noticed the announcement for nwa1120 for Feb 2018. http://www.zyxel.com/support/announcement_wpa2_key_management.shtml I hope this also applies for nwa1123-ac?

snowsail · October 2017

I found the announcement http://www.zyxel.com/support/announcement_wpa2_key_management.shtml I hope this also applies for my product?

Zyxel_Kelly · October 2017

@snowsail

Currently NWA1123-AC series means NWA1123-AC Pro and NWA1123-AC V2 which are current selling products on the market.

These 2 models are not affected by these vulnerabilities.

We have updated the latest post "Zyxel security advisory for the key management vulnerabilities of WPA2 protocol"

Please refer to "https://businessforum.zyxel.com/discussion/642/zyxel-security-advisory-for-the-key-management-vulnerabilities-of-wpa2-protocol#latest "

If you are referring to NWA1123-AC, this was an EOL (End of Life) product and no plan to have further software maintenance.

Also, we suggest not using client mode on NWA1123-AC to be free from these vulnerabilities.

Beat19 · October 2017

Uhm, excuse me??

NWA1123-AC most certainly is affected by this vulnerability as it is part of "NWA1120 series", which is listed on the announcement.

Zyxel_Kelly · October 2017

@Beat19,

Thanks for your kindly reminder,

we already updated our feedback and statement.

B_B · November 2017

@ Zyxel Kelly:
the problem that I do have now, is the following: two NWA1123ac APs were purchased in feb. 2016 having a two years warranty. As a matter of fact these APs now became security wise INOPERATIVE because of a missing hotfix.

So what are my options now?
Either is Zyxel willing to do an AP exchange of my newly defective APs (NWA1123 ACv2 vs. my NWA1123AC) or is able to bring out the hotfix that was originally announced two weeks ago.
The latter will definitely help a mojority of other users though.

And yes, I do have an understanding for cutting support for EOL devices, as long as these models have no valid warranty (which is not the case with the NWA1123ac!) anymore.

Cheers*B_B

Zyxel_Kelly · November 2017

@B_B,

Thanks for your feedback,

as discussion on another topic,

https://homeforum.zyxel.com/discussion/426/zyxel-security-advisory-for-the-key-management-vulnerabilities-of-wpa2-protocol

we checked with Biz WLAN team,

we will provide hotfix for NWA1123-AC v1.

If you have other questions of WLAN product, you can post on Zyxel Biz WLAN Forum as below:

https://businessforum.zyxel.com/categories/wlan

Thank you for using Zyxel.

B_B · November 2017

Zyxel_Kelly, thanks for your info update on that!
Meanwhile business support pointed out the same link/info to me as well.
So NO KRACK Attack victim as long as not configured as a WiFi client.
Cheers*B_B

is AccessPoint nwa1123-ac affected by KRACK and will receive a firmware update?

All Replies

Categories

Wireless Help Center