November 22, 2017

Perle Closes KRACK IEEE 802.11 Security Standard Vulnerability

New firmware download available for Perle IOLAN SDS W to fix WiFi WPA2 Standard Security Flaw

NASHVILLE, November 22nd, 2017 — Perle Systems, a global manufacturer of secure device networking hardware, has released new firmware for the IOLAN SDS W Secure Wireless Device Server to patch the recently disclosed vulnerability found in WPA2.

Serious weaknesses were recently discovered in the WPA2 protocol standard, which secures all modern protected WiFi networks. Using Key Reinstallation attaCKs (KRACK), it is possible for an attacker to harvest sensitive information being transmitted over a WiFi network such as credit card numbers, passwords, emails, chat messages and so on. Additionally, attackers may be able to inject ransomware or malware onto networks.

This security weakness is with the WiFi standard itself and not with an individual product or implementation. Every WiFi able device is most likely affected. According to the WiFi Alliance® there is no evidence that the vulnerability has been exploited maliciously but, users are advised to ensure they have installed the latest recommended updates from device manufacturers.^*

John Feeney, COO at Perle Systems comments, Perle provides a plethora of end-to-end encryption protocols in our products to protect networks from malicious attacks. However, we re-iterate the advice given by the WiFi Alliance and urge our customers to install the latest firmware available from our website.

^* Wi-Fi Alliance® security update WiFi Alliance. Web. 16 October 2017