VulnHub

Real-time Cybersecurity News

16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password

Security Affairs
Vulnerability

Overview

A serious vulnerability in Broadcom's Wi-Fi technology, present since at least 2010, allows attackers within range to take control of affected routers without needing a password. Researcher Quentin Kaiser revealed this flaw during a presentation at Hexacon in Paris, noting it resides in Broadcom’s proprietary 802.11 implementation. This means any device using this outdated SDK could be at risk, making it a significant concern for users and companies relying on vulnerable routers. The implications are troubling, as attackers could potentially execute harmful code, leading to unauthorized access and control over network settings. Users should be aware of this issue and consider checking if their devices are affected and whether any updates or patches are available.

Key Takeaways

  • Affected Systems: Broadcom routers using the affected 802.11 SDK since 2010
  • Action Required: Users should check for firmware updates from their router manufacturers and apply any available patches to mitigate the vulnerability.
  • Timeline: Disclosed on October 2023

Original Article Summary

A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication. Researcher Quentin Kaiser presented a talk at Hexacon in Paris documenting a vulnerability in Broadcom’s proprietary 802.11 implementation that has been present in their SDK since at least 2010. The bug allows an attacker […]

Impact

Broadcom routers using the affected 802.11 SDK since 2010

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Disclosed on October 2023

Remediation

Users should check for firmware updates from their router manufacturers and apply any available patches to mitigate the vulnerability.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Vulnerability.

Read Original Article

Related Coverage

Half the AI bot traffic hammering your website comes from Meta

Help Net Security

According to DataDome's latest report, AI bot traffic surged by 41.5% in the third quarter of 2026, reaching nearly 25 billion requests. A significant portion of this traffic, nearly half, originated from Meta's Muse, which generated 29.1 million requests during its initial launch period from September 22 to October 3. Most of these requests, about 99.3%, came from cloud and content delivery network (CDN) sources. This increase in AI-generated traffic raises concerns for website operators, as it can lead to potential slowdowns and increased costs, complicating the management of legitimate user interactions. As AI technologies continue to evolve, businesses must stay vigilant about the implications of bot traffic on their online operations.

Oct 19, 2026

Ransomware pressure now reaches employees’ homes and families

Help Net Security

A recent survey by Semperis revealed that ransomware attackers are now targeting employees' families, with 37% of organizations reporting threats made against relatives or friends of staff members. This alarming trend was highlighted in the 2026 Ransomware Risk Report, which surveyed 1,200 IT and security professionals from companies that have faced successful ransomware attacks. The findings suggest that cybercriminals are willing to escalate their tactics to intimidate victims into paying ransoms. Mickey Bresman, CEO of Semperis, emphasized the serious nature of these threats, noting that they can cause both cyber and physical harm. This shift in tactics raises significant concerns about the safety of employees outside of the workplace and the lengths to which attackers will go to maximize their profits.

Oct 19, 2026

AI security tool exposes thousands of vulnerabilities, costing banks millions

SCM feed for Latest

Financial institutions are grappling with a wave of software vulnerabilities identified by advanced AI security tools. These tools are finding and reporting issues at a pace that banks struggle to keep up with, leading to significant financial losses. As vulnerabilities pile up, the challenge for these institutions is to patch the software before attackers can exploit these weaknesses. The situation is urgent, as the longer these vulnerabilities remain unaddressed, the greater the risk of data breaches and financial fraud. This growing issue emphasizes the need for banks to enhance their cybersecurity strategies and response capabilities.

Oct 19, 2026

Google enhances Android security with new AI-powered scam protections

SCM feed for Latest

Google has rolled out new AI-driven security features for Android devices aimed at combating sophisticated scam messages and call-forwarding abuse. This update is a response to the growing number of scams targeting users, which can lead to financial loss and privacy breaches. The new protections will help identify and block potential scam communications before they reach users. As scams become more advanced, it's crucial for tech companies to enhance their security measures to protect consumers. This initiative is part of a broader effort to improve user safety on mobile platforms, ensuring that Android users have better tools to avoid falling victim to scams.

Oct 19, 2026

Hackers exploit SiteGuard WAF flaw to run commands as admins

BleepingComputer

Attackers are exploiting a serious OS command injection vulnerability in SiteGuard Server Edition, which allows them to execute commands with root or SYSTEM privileges on compromised servers. This flaw poses a significant risk to any organizations using this software, as it can lead to unauthorized access and control of sensitive systems. The vulnerability is currently being targeted in active attacks, raising concerns for companies that rely on SiteGuard for their web application firewall needs. It’s crucial for affected users to take immediate action to secure their systems and prevent potential breaches. The ongoing exploitation of this flaw highlights the importance of regular software updates and security assessments to protect against emerging threats.

Oct 18, 2026

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119

Security Affairs

The latest Malware Newsletter from Security Affairs reveals several significant cybersecurity threats. One of the highlighted threats is the IronChain ransomware, which poses a risk to businesses by potentially causing permanent data loss and extensive downtime if a ransom is not paid. Additionally, researchers are concerned about AI models that could self-replicate without needing a datacenter, raising alarms about automated attacks. Another noteworthy development is the evolution of the XWorm malware, which has transitioned from being an infostealer to a surveillance platform, indicating a shift in the type of data attackers are targeting. Lastly, the Hirudo malware is noted for distributing fake updates, which could trick users into installing harmful software. These threats underscore the ongoing challenges businesses face in safeguarding their data and systems.

Oct 18, 2026