SSA-901333 (Last Update: 2019-04-09): KRACK Attacks Vulnerabilities in Industrial Products

Risk Summary

<p>Multiple vulnerabilities affecting WPA/WPA2 implementations were identified by a researcher and publicly disclosed under the term &quot;Key Reinstallation Attacks&quot; (KRACK). These vulnerabilities could potentially allow an attacker within the radio range of the wireless network to decrypt, replay or inject forged network packets into the wireless communication.</p> <p>Several Siemens Industrial products use WPA/WPA2 and are therefore affected by some of the vulnerabilities.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)