Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Fragmentation Attacks - can it be fixed?

BWCBWC Cybersecurity Overlord ✭✭✭

Hi,

the smart People at Ruckus informed yesterday about a FragAttack (or a series thereof) which sounded alarming and affects probably all brands of WiFi equipment.

Is there some information available how SonicWall will address this situation?

--Michael@BWC

Category: SonicWave
Reply
Tagged:

Answers

  • ElimElim Newbie ✭

    It seems that SonicWall hasn't responded yet.

    Github has a list of vendors responses to FragAttacks

    https://github.com/vanhoefm/fragattacks/blob/master/ADVISORIES.md

  • BWCBWC Cybersecurity Overlord ✭✭✭

    @Elim it's a bit irritating that no official Statement from SNWL so far, considering Mathy Vanhoef hold it backup for 9 months and informed several companies in advance. Maybe he did not recognized SNWL as a Wi-Fi vendor.

    --Michael@BWC

  • Enzino78Enzino78 Enthusiast ✭✭

    Sohpos and Zyxel are recognized... no mentions for the other relevant security vendors. Michael, I think you're right.

  • BWCBWC Cybersecurity Overlord ✭✭✭

    Hi SNWL, any word on this? Mikrotik also released a new Firmware with fixes for FragAttacks which leaves SNWL to be the last out of three brands I resell, WiFi-wise. They did not made it to Mathys list though, so probably no progress by just ignoring?

    --Michael@BWC

  • LarryLarry All-Knowing Sage ✭✭✭✭

    Datto is not on the list either - and they just released their new WiFi-6 APs earlier this month. The older models are all out in the field...

  • MicahMicah SonicWall Employee

    Hi All,

    SonicWall is investigating the FragAttacks vulnerabilities to determine the potential impact on the following SonicWall WiFi-enabled products:

    • SonicWall TZ Firewalls with WiFi
    • SonicPoint Wireless Access Points
    • SonicWave Wireless Access Points

    For further information, please see: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0015

    @micah - SonicWall's Self-Service Sr. Manager

Sign In or Register to comment.