Unpatched 16-year-old Broadcom Wi-Fi WPS flaw enables unauthenticated RCE on routers, affecting 1.5M+ gateways in Belgium
Researcher Quentin Kaiser presented at Hexacon a vulnerability in Broadcom's proprietary 802.11 implementation, present in its SDK since at least 2010, that gives an attacker within Wi-Fi range unauthenticated remote code execution on affected routers without the network key or WPS enrollment. An incomplete patch was silently released in …