As global digitalisation increases, more and more enterprises worldwide are turning to emerging tech... Read the full story
2017-10-16 07:46 PM
For those who haven't heard, news of a severe breach in the WPA2 Wireless protocol being released on 16th October. Given we can't update the firmware in our routers/modems when will Optus be updating them for such a critical issue.
Here is an article with the details for anyoen who is interested:
I have a CG3000v2 which has Firmware v2.08.07.
2017-10-16 07:51 PM
Its no 5 minute job.
Once the full announcement is made for the flaw then the device manufacturers will need to work out if they can patch it.
Then once thats been tested its sent to isps liek Optus to test then release.
Probably better targets than home users at this point in time in regards to manufacturers working on patches.
2017-10-16 07:55 PM
Major device manufacturers were notified weeks ago and a number (e.g. Ubiquiti, Mikrotik) have apparently already released updates for their devices.
2017-10-16 05:21 PM - edited 2017-10-16 05:30 PM
Based on past experience with Optus I won't hold my breath!
I'd be happy to update the firmware myself since I know how to get in to advanced settings (thank you Whirlpool) but can't find an update on here or the Sagem site.
It's worth keeping in mind that in order to pull off such an attack, a hacker would need to be in your device's Wi-Fi range and impersonate a network that your device already trusts and would attempt to connect to. Secondly, the attack does not compromise a Wi-Fi network's password, so a hacker won't be able to clandestinely join your home network.
2017-10-19 08:52 AM
I have the same cable modem - CG3000v2 which has Firmware v2.08.07
The Netgear advisory is found here: https://kb.netgear.com/000049498/Security-Advisory-for-WPA-2-Vulnerabilities-PSV-2017-2826-PSV-2017-...
I noted this part of the advisory "... gateways are only affected when in bridge mode (which is not enabled by default and not used by most customers)."
I logged into the modem and verified that the checkbox for 'Bridge mode' is indeed not ticked. Good news.
So, trusting Netgear's advice, I am satisfied I will not be affected, as I don't have a router that I need to 'bridge' to.