Let's say that I'm connected to some random Wi-Fi network and from that point I want to check the version of currently installed firmware, but let's exclude possibility of logging in with default credentials.
This made me think if I can determine router firmware version, that means that I can check if specific firmware is either vulnerable or not to the latest discovered KRACK vulnerability.
Example: WAC720/WAC730 Firmware Version 3.7.12.0
, and changelog says:
Fixed security vulnerabilities in WPA2 handshake mechanism.
If it is possible, then how can be done that?
/201(6|5|4|3|2|1)/
matching strongly suggests that it's unpatched since it wasn't known in say, 2015. I looked at three router landing pages's HTML and all three had dates. DOH!