/
attack_type:remote_code_execution × victim_sectors:telecommunications × limpar

Resultados

3 casos · pág. 1/1

thehackernews.com · high

Unpatched Broadcom WPS flaw lets in-range attackers run code as root on millions of Wi-Fi routers; no CVE or fix

Researcher Quentin Kaiser disclosed on October 16 an unauthenticated memory-corruption flaw in Broadcom's Wi-Fi Protected Setup (WPS) implementation. It lets an attacker within radio range execute code as root on affected routers, with no Wi-Fi password or pairing step. Kaiser demonstrated working exploits against Belgian ISP gateways: th…

securityaffairs.com · high

Unpatched 16-year-old Broadcom Wi-Fi WPS flaw enables unauthenticated RCE on routers, affecting 1.5M+ gateways in Belgium

Researcher Quentin Kaiser presented at Hexacon a vulnerability in Broadcom's proprietary 802.11 implementation, present in its SDK since at least 2010, that gives an attacker within Wi-Fi range unauthenticated remote code execution on affected routers without the network key or WPS enrollment. An incomplete patch was silently released in …

gbhackers.com · high

Broadcom WPS Flaw Lets Nearby Attackers Gain Root RCE on Wi-Fi Routers Without Password; Belgian ISP Devices Unpatched

Researcher Quentin Kaiser (QTNKSR) disclosed a memory corruption flaw in Broadcom's Wi-Fi Protected Setup (WPS) implementation. It allows an unauthenticated attacker within wireless range to disclose memory and execute code, including as root, on vulnerable routers. The attacker does not need the Wi-Fi password, network membership or a co…