Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

A critical unpatched vulnerability in Broadcom's Wi-Fi setup software allows an attacker within radio range to execute arbitrary code as root on affected routers. No network password or pairing step is required to exploit the flaw. Security researcher Quentin Kaiser disclosed the vulnerability on October 16, demonstrating successful attacks against home gateways from three Belgian internet providers. In at least one case, the attacker was able to read the Wi-Fi password directly off the device. The vulnerability poses a significant risk to home and small office users relying on Broadcom-based routers. No patch has been released at the time of disclosure, leaving affected devices exposed. The attack is proximity-based, requiring the attacker to be within Wi-Fi radio range of the target device.