A vulnerability in Broadcom’s Wi-Fi setup software allows attackers within radio range to execute code with root privileges on affected routers without needing the network password, according to a disclosure by security researcher Quentin Kaiser on October 16. The flaw affects routers from multiple vendors, with Kaiser demonstrating successful attacks against home gateways supplied by three Belgian internet providers. In some cases, the exploit extracted the Wi-Fi password from the device, while in others it established a remote command shell over the air.
The vulnerability exists in Broadcom’s Wi-Fi Protected Setup implementation and stems from improper handling of fragmented setup messages, which can corrupt router memory. Millions of devices worldwide are estimated to be affected, including older eCos-based chips that will likely never receive patches. No CVE has been assigned despite Broadcom’s knowledge of the flaw since 2018, and no fixes have been deployed to affected routers. Defenders can use YARA rules and scanning scripts to identify vulnerable equipment, though replacement remains the only option for devices incapable of receiving patches.
Source: Read the full story at The Hacker News
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
