WPA2-Vulnerability (For Wireless Routers, USB adapters)

Nov 10, 2017

Buffalo Inc. is aware of the recently publicized security exploit "KRACKs".

Since this vulnerability depends on the client function of the WPA 2 standard, it affects wireless USB adapters and bridge mode (WB and WDS, etc.) of wireless routers that support WPA 2.

Buffalo is investigating its product line to determine which products may be affected by this vulnerability. As the investigation progresses, Buffalo will update this public release with information about affected products.

Revision History


2017/11/10 Initial Public Release
2017/11/10 Affected Products Update

Affected Products

Current Products(AP)

Category Product Series Note
Wireless Router WCR-G300 Series We will release the fixed firmware soon. Please update the firmware as soon as it is released.

Discontinued products(AP)

Category Product Series Note
Wireless Router WZR-1750DHP Series We will release the fixed firmware soon. Please update the firmware as soon as it is released.
WZR-900DHP2 Series
WZR-600DHP2 Series
WZR-HP-AG300H Series
WZR-HP-G450H Series
WZR-HP-G300NH Series
WZR-HP-G300NH2 Series
WHR-1166D Series
WCR-300S Series
WCR-HP-G300 Series
Wireless USB Adapter WLI-UTX-AG300 Series We will release the fixed driver soon. Please update the driver as soon as it is released.
WLI-UC-G300HP Series
WLI-UC-GNM Series

Current Products(ME)

Category Product Series Note
Wireless Router WZR-900DHP Series We will release the fixed firmware soon. Please update the firmware as soon as it is released.
WZR-600DHP2 Series
WZR-450HP2D Series
WZR-HP-AG300H
WZR-HP-G300NH Series
WZR-HP-G300NH2 Series
WZR-HP-G450NH Series
WHR-1166D Series
WBMR-300HPD Series
Wireless USB Adapter WLI-UC-GNM Series We will release the fixed driver soon. Please update the driver as soon as it is released.

Discontinued Products(ME)

Category Product Series Note
Wireless Router WZR-1750DHP Series We will release the fixed firmware soon. Please update the firmware as soon as it is released.
WCR-300S Series
WCR-HP-G300 Series
Wireless USB Adapter WLI-UTX-AG300 Series We will release the fixed driver soon. Please update the driver as soon as it is released.
WLI-UC-G300HP Series

If you are not using the bridge mode (WB and WDS etc.) with the wireless router, it is not affected, so you can use it safely as it is.
Please confirm the following points as to whether or not to use the bridge mode.
(The confirmation method differs for some products, please refer to the explanation about the bridge mode of each product manual.)

  • *If you set the unit rear switch to "AUTO" at the time of product setting, the bridge mode is not enabled.
  • *If you set the unit rear switch to "MANUAL" at the time of product setting, and "ROUTER" or "AP" is selected with the switch, the bridge mode is not enabled.
  • *If you set the unit rear switch to "MANUAL" at the time of product setting, and "WB" is selected with the switch, the bridge mode is enabled.

Products confirmed Not Affected

Current Products

Category Product Series Note
Wireless Router WXR-1900DHP Series Even if you use these products with bridge mode, you can safely use it as it is.
*During the bridge mode, the unit rear switch is set to "WB".
WSR-300HP Series
Wireless Access Point WAPM Series Even if you use these products as a repeater (WDS enabled), you can safely use it as it is.
WAPS Series

Discontinued Products

Category Product Series Note
Wireless Router WMR-433 Series Even if you use these products with bridge mode, you can safely use it as it is.
WMR-300/300S Series

Workarounds

As soon as the affected products are clarified, we will release the firmware that will be fixed vulnerability. Buffalo strongly recommends that you download the latest firmware as soon as possible after fixed firmware is available.

Contact Window

For inquiries regarding this matter, please contact us.