Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

A vulnerability in Broadcom's Wi-Fi setup software allows attackers to run code with root privileges on affected routers. This can be done by an attacker within radio range, without needing the network password or any pairing process. Security researcher Quentin Kaiser demonstrated the attack on home gateways provided by three Belgian internet service providers. In one instance, the attack successfully retrieved the Wi-Fi password from the device. The flaw affects Broadcom-based routers, potentially exposing them to unauthorized access and code execution. Kaiser publicly disclosed the vulnerability on October 16.