D-Link Forums
The Graveyard - Products No Longer Supported => Routers / COVR => DIR-885L => Topic started by: GreenBay42 on August 10, 2018, 10:15:45 AM
-
BETA firmware v1.10B01 has been released. This firmware is a security patch for the WPA2 Vulnerability (KRACK).
Firmware - ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-885L/REVA/DIR-885L_REVA_FIRMWARE_PATCH_v1.21B03_BETA.zip (ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-885L/REVA/DIR-885L_REVA_FIRMWARE_PATCH_v1.21B03_BETA.zip)
Release Notes:
Problems Resolved:
A WPA2 wireless protocol vulnerability was reported to CERT//CC and public disclosed as: VU#228519 - Wi-Fi Protected Access II (WPA2) handshake traffic can be manipulated to induce nonce and session key reuse.
The following CVE IDs have been assigned to VU#228519. These vulnerabilities in the WPA2 protocol:
• CVE-2017-13077: reinstallation of the pairwise key in the Four-way handshake
• CVE-2017-13078: reinstallation of the group key in the Four-way handshake
• CVE-2017-13079: reinstallation of the integrity group key in the Four-way handshake
• CVE-2017-13080: reinstallation of the group key in the Group Key handshake
• CVE-2017-13081: reinstallation of the integrity group key in the Group Key handshake
• CVE-2017-13082: accepting a retransmitted Fast BSS Transition Re-association Request and reinstalling the pairwise key while processing it
• CVE-2017-13084: reinstallation of the STK key in the PeerKey handshake
• CVE-2017-13086: reinstallation of the Tunneled Direct-Link Setup (TDLS) PeerKey (TPK) key in the TDLS handshake
• CVE-2017-13087: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame
• CVE-2017-13088: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame
-
anyone here have tried this newer firmware? it is not yet showing in router's auto update firmware page.
-
Correct. This is still considered a BETA firmware which is not pushed through the auto update server.
I haven't heard of any issues with the beta. If it doesn't work you can always downgrade back to the older version.
-
thank you for the information.
-
any DIR-885L owner who was braved enough to update to v1.21B03 ?
I am still on v1.20 for more 18 months now and find it stable, if aint broke then dont fix motto.
Anyway, yes I would like to have that KRACK fix.
But this 885L is my main router with 25 to 35 devices (e.g. repeater, AP, IP cams, IOT, smart devices, pcs, phones, etc). Downtime will be nightmare for households users, seems internet is a must thing now :)
I really love this 885L, the CPU is great and able to handle video calls with ease even with dozens of devices, qos off.
-
You could try it and see if it works for you. If not, revert back to prior version. ;) I would save off the current router configuration to file before upgrading FW.
-
D-Link used to say in their FAQ on Krack that the Beta firmware would be tested and changed to the latest official release a while ago. The latest FAQ says the patch has been released and the case is closed. So should we assume that there never will be an final release of this firmware?
-
This will be the last version of FW made available. Should be good to use.
D-Link used to say in their FAQ on Krack that the Beta firmware would be tested and changed to the latest official release a while ago. The latest FAQ says the patch has been released and the case is closed. So should we assume that there never will be an final release of this firmware?
-
I'm really sorry to hear that. I bought DIR885L last year and a few months later Dlink finished support for this device. Um.
Now an important security patch has been released and it is only available as beta?? Um.
Full support for Windows XP has been available over 10 years from the end-of-sales.
Without patches this router will be a relic soon and can be thrown away. It's ridiculous. I will never consider Dlink in the future.
-
So your not going to load the last FW beta and keep using the router? Why not?
4 years is about the normal support duration run for D-Link routers. If you want to extend the life of the router, you can always load up 3rd party FW if they support it.
Routers differ from PC OS platforms. There is no comparison. ::)
Good Luck.
I'm really sorry to hear that. I bought DIR885L last year and a few months later Dlink finished support for this device. Um.
Now an important security patch has been released and it is only available as beta?? Um.
Full support for Windows XP has been available over 10 years from the end-of-sales.
Without patches this router will be a relic soon and can be thrown away. It's ridiculous. I will never consider Dlink in the future.
-
Actually I don't want to install FW beta because it's beta. When buying DL-885 last year i was hoping to use this router for years. I'm disappointed now. If I knew that End-of-Support would take place a few months after buying this router I would definitely not have bought it. 3rd party FW is not an option for me. I don't have enough passion and technical knowledge to use this kind of FW.
Without any regular support from Dlink I'm considering other options.
-
it can't hurt anything by giving the beta a try. You can always revert back to non beta FW. I've never had problems with beta's. There offered to users who wish to use them. The only thing is that the beta file may have not fully been testing with D-Link labs or completed testing. The beta FW you see now would be tested and upon concluding of that test, the file name would just be changed. It's up to D-Link to make there support policies and implement them. They choose when they stop supporting there products. If users want to use them beyond there support dates, that's your choice. You can certainly do that.
Anyways. Up to you.
Good luck in your endeavors.
-
I've finally got around to installing Firmware v1.21B03 BETA. Didn't go through the suggested process of factory reset, install firmware, sacrifice goat under full moon, setup from scratch. I simply installed it over my current settings. No smoke. No sparks. No loud bang. Router rebooted when the firmware was done loading and has been working without issue. Will let you know if I notice anything.
Larry ....
-
If you seem to exhibit or continue to see problems, please factory reset and setup from scratch to confirm if problems continue or not.
Thank you.
I've finally got around to installing Firmware v1.21B03 BETA. Didn't go through the suggested process of factory reset, install firmware, sacrifice goat under full moon, setup from scratch. I simply installed it over my current settings. No smoke. No sparks. No loud bang. Router rebooted when the firmware was done loading and has been working without issue. Will let you know if I notice anything.
Larry ....
-
FYI, Security update for the DIR-855L:
http://forums.dlink.com/index.php?topic=75404.0 (http://forums.dlink.com/index.php?topic=75404.0)
-
Upgraded to this version, and now a fjew days after it started to lose 6 pings and then it runs fo 1-5min and same hapens agin.
During the ping loses router is unavail "router not found".
i will try to roll back
-
Did you try a full factory reset of the router after v1.21 FW was applied and setup from scratch?
Upgraded to this version, and now a fjew days after it started to lose 6 pings and then it runs fo 1-5min and same hapens agin.
During the ping loses router is unavail "router not found".
i will try to roll back
-
Did you try a full factory reset of the router after v1.21 FW was applied and setup from scratch?
Upgraded to this version, and now a fjew days after it started to lose 6 pings and then it runs fo 1-5min and same hapens agin.
During the ping loses router is unavail "router not found".
i will try to roll back
Did a factory reset and it acts the same, went back to 1.20 and it's still acting the same. i think i managed to kill the router :-\ . if you don't have any other ideas that i can try?
Edit Disconnected everything from the router and it seems that my covr-2202 is causing the issue. Thats strange since its not running in router mode.
-
How is the COVR connected to the 885? Is the COVR in AP or router mode?
Is both 885 and COVR wireless running at the same time?
-
How is the COVR connected to the 885? Is the COVR in AP or router mode?
Is both 885 and COVR wireless running at the same time?
its connected in bridge mode, and only 2,4Ghz is enabled on the 885 but its using a different ssid and running on different channel.
also the cover uses 1gbit backhaul.
-
How close is the DIR router to the A Point? Distance wise...
-
i would say first one about 13 meters away from the router. second one is in the garage also about 13 meters away in the opposite direction .(http://zlobo.bounceme.net/mesh.png)
i use fw1.06 on the cover-2202 and they use wired backhaul.
reason for why the 2,4Ghz is on on the router is that the vacuum cleaner does not support 5Ghz and 2,4Ghz with same ssid for some reason.
I recently bought the Cover to get coverage in the garage an in the garden.
-
Ok, well you can do this, set manual channels on the DIR router to something far apart from what the COVR uses. Since we can't change channels on COVR. Use a wifi analyzer to see what channels the COVR is using and then change the DIR router to something far apart. 1, 6 or 11.
I would turn down the power output of the DIR router as well. Try medium or low. Helps reduce the interference and noise for the COVR wifi. I do this when I'm testing two wifi systems at the same time. If your using the COVR more as your primary wifi system, then the DIRs wifi doesn't need to be working as much. ;)