Security researcher Quentin Kaiser disclosed a flaw in Broadcom's Wi-Fi setup software, enabling attackers within radio range to run code as root on Broadcom-based routers without needing the network password or pairing step.
The vulnerability or weakness
The vulnerability lies in Broadcom's version of Wi-Fi Protected Setup (WPS), which mishandles the reassembly of fragmented WPS setup messages, allowing attackers to corrupt the router's memory and execute their own code.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
This flaw could lead to unauthorized access and potential data breaches, impacting the operations and security of affected organizations, particularly those relying on vulnerable Broadcom routers.
Industries affected
This issue affects a wide range of industries, including residential users, small businesses, and enterprises using Broadcom-based devices.
Users affected
Home users, small businesses, and enterprises using affected Broadcom routers are at risk of having their devices compromised, potentially leading to unauthorized access and data theft.
