Em_Will_I_Am's profile

Thu, Dec 14, 2017 10:00 AM

Beware of KRACK!

If you are like me and love to read about all the recently published firmware updates (Hey, most of my TV shows are on winter break), you will notice most of them mentioned KRACK.  What exactly is KRACK?  That is an excellent question.  Let’s have a look.


In recent weeks, a vulnerability was uncovered in the WPA2 Wi-Fi security protocol.  This vulnerability called a “KRACK Attack”, uses Key Reinstallation AttaCKs (KRACK, get it?) to read information that is safely encrypted under normal circumstances.  Information we all hold dear such as passwords, banking information, credit card information, etc.  Behind the scenes, a key reinstallation attack is too complicated to describe in this blog, but imagine there was a virus that could change all security encryption keys to all zeros. 


This vulnerability impacts all devices which use Wi-Fi regardless of type, including laptops, TVs, Wi-Fi routers and of course, mobile devices.  This is due to the fact that it is related to the WPA2 protocol itself, and not an individual product or implementation of WPA2.


As soon as we were notified of any potential vulnerabilities, we worked closely with OEMs to address those issues as quickly as possible.  Patches were rolled out ASAP and continue to be as of this writing.


With that said, you are in luck!  To date we have already released software updates to secure your devices from KRACK on the following:


The Essential                       Version NMJ32F                            12/06/2017

LG G3                                  Version LS990ZVI                          11/28/2017

LG G5                                  Version LS992ZVD                        11/28/2017

LG G6                                  Version LS993ZV9                         11/21/2017

LG V20                                Version LS997ZVB                         11/21/2017

Samsung J3                        Version J327PVPU3AQJ3              11/06/2017

Samsung J7                        Version QJ3                                    11/20/2017

Samsung Note 5                 Version N920PSPT3DQK1             12/04/2017

Samsung S6                       Version G920PVPS4DQJ1             11/13/2017

Samsung S6 Edge              Version G925PVPS4DQJ1             11/13/2017

Samsung S6 Edge+            Version G928PSPT3DQK1            12/04/2017

Samsung S8                        Version G950USQU1AQJH           11/20/2017

Samsung S8+                      Version G955USQU1AQJH           11/20/2017


Nexus and Pixel users, you have not been forgotten.  The KRACK vulnerability was addressed in Google’s Android security update for November.  And as an added bonus!!  A patch has been released by Microsoft to address KRACK within Windows operating system on October 10, 2017.  The moral of the story is to keep your devices up to date with the most recent versions of all software for optimal performance and security.  And of course, KRACK is WACK!

This conversation is no longer open for comments or replies and is no longer visible to community members.


No Responses!