>From our Cisco SE:
The fix for IOS based AP’s (802.11ac Wave 1 or older) has been posted (8.3.130.0) The fix for ClickOS based AP’s (All 802.11ac Wave 2 AP’s [1800, 2800 3800 series]) is in finalization testing and should be posted within a few days. (8.3.13x.0) same for 8.2/8.4/8.5 The fix for 8.0 is being written now and ETA will be provided shortly. / Stephen Belcher Assistant Director of Network Operations WVU Information Technology Services One Waterfront Place / PO Box 6500 Morgantown, WV 26506 (304) 293-8440 office (681) 214-3389 mobile [email protected]<mailto:[email protected]> ________________________________ From: The EDUCAUSE Wireless Issues Constituent Group Listserv <[email protected]> on behalf of Chuck Anderson <[email protected]> Sent: Monday, October 16, 2017 3:07:55 PM To: [email protected] Subject: Re: [WIRELESS-LAN] Big flaw in WPA2 It isn't a design flaw. It is an implementation flaw that everyone did wrong because the spec didn't address the need to be careful about it. Read this Aruba FAQ, it is helpful to address these sorts of questions: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007_FAQ_Rev-1.pdf On Mon, Oct 16, 2017 at 06:57:57PM +0000, Mike Cunningham wrote: > If this is a flaw in the design of the WPA2 protocol isn't the fix going to > need to be made on both sides of the communication link? Access points will > all need to be updated but also all client wifi drivers are going to need to > be updated on all wifi enabled devices that support WPA2, right? > > Mike Cunningham > > > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > [mailto:[email protected]] On Behalf Of Stephen Belcher > Sent: Monday, October 16, 2017 10:40 AM > To: [email protected] > Subject: Re: [WIRELESS-LAN] Big flaw in WPA2 > > > >From Cisco: > > > > https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa > > > > > > / Stephen Belcher > > Assistant Director of Network Operations > WVU Information Technology Services > > One Waterfront Place / PO Box 6500 > > Morgantown, WV 26506 > > > > (304) 293-8440 office > (681) 214-3389 mobile > [email protected]<mailto:[email protected]> > > ________________________________ > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > <[email protected]<mailto:[email protected]>> > on behalf of Richard Nedwich > <[email protected]<mailto:[email protected]>> > Sent: Monday, October 16, 2017 10:34:43 AM > To: > [email protected]<mailto:[email protected]> > Subject: Re: [WIRELESS-LAN] Big flaw in WPA2 > > Ruckus is providing a response today. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
