0

Regarding the vulnerability in WPA2 known as KRACK, has Apple released firmware updates yet for the Apple-branded AirPort Base Station devices?

  • 2
    While the question is not exactly a dupe (iOS versus AirPort), the premise is and the answer is the same. Possible duplicate of Has the WiFi KRACK vulnerability been patched for iOS? – Allan Oct 20 '17 at 1:10
  • @Allan Actually the technical issues for KRACK may differ by access point versus client-side, according to early reports. Even issues regarding iOS versus macOS may differ according to some reports. One of the keys to success for a Stack Exchange is narrow specificity. Makes sense to me to keep theses platforms distinct regarding KRACK, to avoid confusing intertwining threads of coverage in the Answers. – Basil Bourque Oct 20 '17 at 1:28
  • The question, as written, is "if" Apple has released a fix, not what the differences are in the security fix. The answer provided addresses the availability of security fixes for all Apple products which answers the question. That said - there really is no distinction between AP and client - the vulnerability is the same. – Allan Oct 20 '17 at 2:23
  • @Allan No, access points at at a different risk than clients. As described on the KrackAttacks website that discloses the vulnerability, some access points may not need any update. Just because Apple may have clients that need patching does not mean their access points will need patching. As much as you may want a simple one-size-fits-all answer to the KRACK problem, there is not one. As for your mention of an Answer addressing “all Apple products”, please link. I do not see AirPort Base Stations covered. – Basil Bourque Oct 20 '17 at 3:13
  • @Allan It's not really a duplicate. Routers seem only affected if they use/provide special protocols (802.11r/802.1s). The real duplicate would be: Patching the KRACK WPA2 Vulnerability in Airport wireless routers. This linked question has another flaw though. – klanomath Oct 20 '17 at 3:27
3

At present there are no updates for the AirPort product line. Apple is notoriously tight lipped about security issues.

For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page.

If/when Apple releases an update that's security related, it will be listed on the Apple Security Updates page. You can get more info about this from the question/answer "Has the WiFi KRACK vulnerability been patched for iOS?"

Additionally, you can check the AirPort Firmware Update page which will provide directions, links, and details on the updates and how to apply them.

At the time of this post, the most recent update were (dated Dec. 20, 2016)

  • 7.7.8 for the AirPort Extreme and Time Capsule 802.11ac products
  • 7.6.8 for the Airport Extreme, Express and Time Capsule 802.11n products

Therefore, at the time of this answer/post there have been no updates to address the KRACK vulnerability.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .