kristate/krackinfo

CISCO will NOT release a free update for vulnerable Autonomous APs.

rapi3 opened this issue · 6 comments

rapi3 commented

After I requested to TAC a free update as a SOHO user for 2 models of CISCO Autonomous AP 3502 and 2602 the request was declined until I pay for a service contract !

Happy KRACK CISCO !

Wow, they are placing the burden on their customers?

That is very unfortunate. I hope they back off on that statement and release a free update. Otherwise CISCO might shoot them selves in the foot on this one.

Ah, btw -- is there an official statement or link with information that you could share? thanks

rapi3 commented

CISCO official statement it is only a PR exercise until now:
"Customers Without Service Contracts
Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC:
Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.
http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html
"
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa

I have at least 10 emails with the support people in the last days and my case nr unresolved as prove if required.
If anybody want to investigate I can provide with another cisco AP serial nr and you can open your case at them and see if you get the link to download the firmware update.

Any updates?

rapi3 commented

On my case still no free update.