WPA2 Krack vulnerability Arris NVG595 needs firmware update.

No one knows. Call 800-288-2020 and ask to speak to technical support. Ask them if they could pusht he update from their end if there's one. 

Calling proved to be a joke. The agent can only help with existing problems. He would not transfer me to a 2nd tier agent, either. Also, ATT does not allow me to choose my DNS and I can't config the modem for the OpenDNS route numbers. 

The agents have no access to the internet at the 800-228-2020. But they sure can tell whether my bill's paid.

KRACK is serious.

https://www.krackattacks.com

So far it doesn't seem there is one. I talked to AT&T a minute ago and they tried to assure me that my router was very safe and protected. The firmware's over a year old so I really doubt that.

Any updates on the firmware part? This is a pretty critical update and we are exposed without it.

All you can do is wait for the push when (or if) it comes.  IMO calling tech support is useless since (a) such questions are not on their "script" so they only have canned default "feel good" answers and (b) they have no contact with the software/firmware groups responsible for those kinds of updates so know nothing about them.

People should escalate beyond tier 1 support.

I got to believe the appropriate support personnel are aware of this since.   Give them some time.  If they have to push updates for all the different modems they support then they got to (a) figure out the appropriate fix, (b) decide how to insert that fix in the firmware for each modem, and (c) fully test each modem to make sure they didn't break anything with the update.  At least I would hope they do (c)!  After all that then they will push the updates.  I suspect they will want to push all at once rather than doing it one at a time as each modem's "turn" comes up for updating. 

What does push mean? It goes out to all wifi routers on its own, I won't have to do anything?