PHOENIX CONTACT: WLAN enabled devices utilising WPA2 encryption
Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. Update A / Revision 2 - 2017-11-09 * Added a detailed list of affected products Update B / Revision 3 - 2018-09-24 * Added firmware update information, see section "Solution"
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-13080US | medium5.3OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames… | ||||
| CVE-2017-13078US | medium5.3OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… | ||||
| CVE-2017-13077US | medium6.8OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio r… | ||||
references
External citations — patches, advisories, analysis.
remediations (3)
- Fixed
PHOENIX CONTACT is actively working on these vulnerabilities. CERT@VDE will update this advisory as soon as further significant details are provided by the vendor, especially with information about patches provided. For PHOENIX CONTACT devices running Microsoft Windows, we recommend to apply the security update provided by Microsoft external link. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. This advisory will be updated as further details become available. For the following products a firmware update addressing the issues is available for download on the Download tab of the corresponding product page on our website: Products: FL EPA 2, FL EPA 2 RSMA Fixed Firmware: 1.53 or higher Released: 06/2018 Products: FL WLAN 5100, FL WLAN 5101, FL WLAN 5102, FL WLAN 5110, FL WLAN 5111 Fixed Firmware: FW 3.06 or higher Released: 06/2018 Products: FL WLAN 1100, FL WLAN 1101, FL WLAN 2100, FL WLAN 2101 Fixed Firmware: FW 2.21 or higher Released: 06/2018
- Fixed
PHOENIX CONTACT is actively working on these vulnerabilities. CERT@VDE will update this advisory as soon as further significant details are provided by the vendor, especially with information about patches provided. For PHOENIX CONTACT devices running Microsoft Windows, we recommend to apply the security update provided by Microsoft external link. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. This advisory will be updated as further details become available. For the following products a firmware update addressing the issues is available for download on the Download tab of the corresponding product page on our website: Products: FL EPA 2, FL EPA 2 RSMA Fixed Firmware: 1.53 or higher Released: 06/2018 Products: FL WLAN 5100, FL WLAN 5101, FL WLAN 5102, FL WLAN 5110, FL WLAN 5111 Fixed Firmware: FW 3.06 or higher Released: 06/2018 Products: FL WLAN 1100, FL WLAN 1101, FL WLAN 2100, FL WLAN 2101 Fixed Firmware: FW 2.21 or higher Released: 06/2018
- Fixed
PHOENIX CONTACT is actively working on these vulnerabilities. CERT@VDE will update this advisory as soon as further significant details are provided by the vendor, especially with information about patches provided. For PHOENIX CONTACT devices running Microsoft Windows, we recommend to apply the security update provided by Microsoft external link. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. This advisory will be updated as further details become available. For the following products a firmware update addressing the issues is available for download on the Download tab of the corresponding product page on our website: Products: FL EPA 2, FL EPA 2 RSMA Fixed Firmware: 1.53 or higher Released: 06/2018 Products: FL WLAN 5100, FL WLAN 5101, FL WLAN 5102, FL WLAN 5110, FL WLAN 5111 Fixed Firmware: FW 3.06 or higher Released: 06/2018 Products: FL WLAN 1100, FL WLAN 1101, FL WLAN 2100, FL WLAN 2101 Fixed Firmware: FW 2.21 or higher Released: 06/2018
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan