CISCO will NOT release a free update for vulnerable Autonomous APs.

[rapi3]

After I requested to TAC a free update as a SOHO user for 2 models of CISCO Autonomous AP 3502 and 2602 the request was declined until I pay for a service contract !

Happy KRACK CISCO !

[kristate]

Wow, they are placing the burden on their customers?

[zeadope-zz]

That is very unfortunate. I hope they back off on that statement and release a free update. Otherwise CISCO might shoot them selves in the foot on this one.

[kristate]

Ah, btw -- is there an official statement or link with information that you could share? thanks

[rapi3]

CISCO official statement it is only a PR exercise until now:
"Customers Without Service Contracts
Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC:
Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.
http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html
"
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa

I have at least 10 emails with the support people in the last days and my case nr unresolved as prove if required.
If anybody want to investigate I can provide with another cisco AP serial nr and you can open your case at them and see if you get the link to download the firmware update.

[zeadope-zz]

Any updates?

[rapi3]

On my case still no free update.