BLE BLEEDINGBIT

[Adam]

I couldn’t find anything in the wireless section on this issue. Here is some information and resources.

https://www.bleepingcomputer.com/news/security/new-bleedingbit-vulnerabilities-affect-widely-used-bl...

and

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181101-ap

[NolanHerring]

If you have the BLE features disabled then your not at risk, per Meraki support.

Also they patched this in 25.13, again per Meraki support.

[Adam]

Interesting, didn't see anything directly related in the 25.13 firmware notes.  The closest thing I see is this

• Fixed an issue where the BLE radio would stop beaconing and scanning (MR30H/MR33/MR74)

[NolanHerring]

I thought the same thing so I reached out and that is when they told me 25.13 has the patch. Pretty sure they were doing to address this in some sort of dashboard notification or blog but I don't recall seeing anything directly from Meraki from a PR stance.

[jdsilva]

25.13 was released before this vuln was made public wasn't it? If so they likely wouldn't have been able to put anything in the notes about it.

[NolanHerring]

That is what I was thinking but I would imagine they knew before the public did so that they could address it internally.