Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

Security researcher Quentin Kaiser disclosed on October 16 a flaw in Broadcom's Wi-Fi setup software that lets attackers within radio range run code as root on routers, without needing the network password. He demonstrated the attack against home gateways from three Belgian ISPs, even reading Wi-Fi passwords off the devices.