🚨 WPSplinter: 16-Year-Old Broadcom Wi-Fi Vulnerability Enables Router RCE
Security researcher Quentin Kaiser has exposed a flaw in Broadcom’s legacy Wi-Fi SDK that could allow attackers within wireless range to execute arbitrary code on vulnerable routers without knowing the Wi-Fi password or completing WPS enrollment.
The exploit chain involves a buffer overflow in EAP-WPS fragment reassembly, memory disclosure, and potential code execution. Demonstrations on ISP gateways reportedly exposed Wi-Fi credentials and achieved interactive reverse-shell access.
⚠️ Disabling WPS may not mitigate the flaw. Legacy firmware and unsupported eCos-based gateways pose particularly difficult remediation challenges.
Technical breakdown, affected platforms, detection toolkit, and mitigation 👇
🔗 https://thecybersecguru.com/exploits/wpsplinter-broadcom-wifi-vulnerability/
The original is being retrieved. Open its source ↗