Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
-
A researcher has disclosed an unpatched vulnerability in Broadcom's Wi-Fi setup software that allows an attacker within radio range to execute code as root on affected routers. The disclosure comes from security researcher Quentin Kaiser, who published details on October 16.
The most concerning aspect of this flaw is that exploitation requires no network password and no pairing step. An attacker only needs to be within Wi-Fi range of a vulnerable device to attempt the attack.
Kaiser demonstrated the attack working against home gateways provided by three Belgian internet providers. In one of those cases, he was able to read the Wi-Fi password directly off the device. The flaw remains unpatched, meaning Broadcom-based routers that rely on the affected setup software may still be exposed.
At the time of reporting, no specific CVE identifier, advisory number, or patch version was provided. Affected users should monitor vendor advisories from Broadcom and their router or ISP provider for updates, and consider restricting Wi-Fi setup or WPS-style functionality where possible until a fix is available.
Source: The Hacker News
Is your organization running Broadcom-based routers or ISP-supplied gateways that could be exposed to this flaw?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login