Unpatched Broadcom WPS flaw lets in-range attackers run code as root on millions of Wi-Fi routers; no CVE or fix
Researcher Quentin Kaiser disclosed on October 16 an unauthenticated memory-corruption flaw in Broadcom's Wi-Fi Protected Setup (WPS) implementation. It lets an attacker within radio range execute code as root on affected routers, with no Wi-Fi password or pairing step. Kaiser demonstrated working exploits against Belgian ISP gateways: th…