Cisco is working to patch multiple products that are affected by the recently disclosed Kr00k vulnerability in WiFi chips from Broadcom and Cypress. The flaw (CVE-2019-15126) was announced yesterday by security researchers at ESET and can be leveraged by an unauthenticated attacker to decrypt data frames captured from a nearby device. Cisco is currently investigating which products are vulnerable and so far it came up with the following list: Enterprise and Service Provider Cisco Connected Grid Routers CSCvs87927 and Small Business Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router.
Source: https://www.bleepingcomputer.com/news/security/cisco-working-on-patches-for-new-kr00k-wifi-vulnerability/

