Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

A flaw in Broadcom’s Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He demonstrated the attack against home gateways supplied by three Belgian internet providers, in one case reading the Wi-Fi password off the device, and the flaw remains unpatched, The Hacker News reports.