16-year-old Broadcom Wi-Fi flaw lets attackers take over routers without a password
A flaw present in Broadcom’s 802.11 implementation since at least 2010 allows an attacker within Wi-Fi range to execute code on affected routers without authentication, without knowing the Wi-Fi password or completing the normal WPS setup. The researcher demonstrated working attacks against the Orange Belgium ASKEY TCG3000 and Proximus Sagemcom F@st/BBOX3V+ devices.
CERT24