I realize this is just going public today but any ETA on when we should expect to see a firmware update that patches the KRACK attack for Particle devices? See: https://www.krackattacks.com CVEs: CVE-2017-13077: Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake. CVE-2…

I asked Cypress this morning! Follow along here! https://community.cypress.com/thread/31101

It’s worth mentioning that all Particle devices maintain a secure and encrypted session that does not rely on the security of the Wi-Fi network. We’re definitely going to patch quickly and often, as always, but we expect a Particle device to be secure on a totally unsecured WiFi network, so a compr…

Thanks for the clarification Dave. Knowing that the particle <> server part is secure is good. Also thanks for the quick ack and response from both of you. Its nice to see that Particle is already on top of it.

Cypress has responded (Cypress community login required). Summary for :particle: We use a 43362 module and are vulnerable to “group 2” of the CVEs (CVE-2017-13080, CVE-2017-13081). By the end of October, Cypress will release the following WICED Studio versions that will address these CVEs: 4.1.3 …

Perfect, honestly for an IoT platform this seems like a very fast turn-around for getting patched firmware out to your users. Thanks again for the fast response!

Quick status update — WICED Studio 6.0.0 has been released by Cypress, so integrating their KRACK fixes into the 0.5, 0.6, and 0.7 lines of :particle: system firmware will be a top priority this week.

Status update — for those of you who have cloned the firmware repo and set up the toolchain to build locally, the KRACK fixes from Cypress have been incorporated into 3 firmware branches: fix/krack-0.5.x fix/krack-0.6.x fix/krack-0.7.x Building and flashing all modules (system and app) on these b…

###Release Update! Firmware v0.5.5 release is available, which has fixes for the KRACK Wi-Fi vulnerability. [image] Particle Device OS Updates Thread Particle Updates Firmware 0.5.5 release is out on the Web IDE for Photon/P1/Electron. (None of the changes af…

Release Update! Firmware v0.6.3 release is available, which has fixes for the KRACK Wi-Fi vulnerability. [image] Particle Device OS Updates Thread Particle Updates Firmware 0.6.3 release is out on the Web IDE for Photon/P1/Electron. (None of the changes affect the Core.)…

KRACK Patch ETA

Firmware

mdma November 7, 2017, 9:39pm 11

###Release Update!
Firmware v0.5.5 release is available, which has fixes for the KRACK Wi-Fi vulnerability.

Topic		Replies	Views
Wpa2 crack/hack General	3	1551	October 31, 2017
Regarding the OpenSSL Vulnerabilities (CVE-2022-3602 and CVE-2022-3786) Particle Updates security	0	435	November 1, 2022
[Solved] Red hard fault SOS if you upgrade 1.2.1 and have incorrect wifi details Firmware	7	929	January 9, 2020
Electron v0.8.0.rc.2 Firmware	1	713	February 14, 2018
Particle Device OS Updates Thread Particle Updates	153	78374	March 15, 2024

KRACK Patch ETA

Related topics