Broadcom Wi‑Fi flaw may affect millions of routers worldwide

A cryptic flaw in Broadcom’s Wi‑Fi setup software could turn a routine home network into a gateway for attackers who don’t need a password. The weakness shows up in Broadcom’s implementation of Wi‑Fi Protected Setup (WPS), a feature designed to simplify joining a wireless network. When the router’s WPS messages are reassembled, Broadcom’s code mishandles certain fragmented frames. That misstep lets a nearby attacker craft wireless frames that can corrupt the device’s memory, potentially giving them control of the router itself.

In practical terms, this means someone standing in the same room or in a nearby apartment could read sensitive data or even open a remote command line on a vulnerable gateway. The researcher demonstrated two outcomes on Belgian gateways: one device exposed its Wi‑Fi password over the air, while another opened a remote shell without any login credentials. Both exploits worked without the attacker needing to be on the local network or paired to the device beforehand, simply by being within radio range.

There’s a catch. Broadcom hasn’t issued a CVE for this flaw, and the bug hasn’t been patched across vendors. The company says it has known about the issue since 2018 and has previously advised customers to switch away from Broadcom’s Wi‑Fi software for fixes. Some older devices built on the legacy eCos platform may never receive a proper patch, while newer Linux‑based models could be updated if vendors roll out firmware fixes. That leaves millions of devices potentially vulnerable for the foreseeable future.

What makes this tricky for everyday users is that there isn’t a single patch to install. Instead, the path forward hinges on the device makers and ISPs releasing firmware updates, or, for many devices, replacing hardware that can’t be patched. In the meantime, researchers have provided tools to help operators and savvy users triage affected gear. Their approach isn’t a replacement for a patch, but it can help you figure out whether your device is in the crosshairs and what to do next.

For households, the takeaway is simple but unsettling: if you rely on a Broadcom‑based gateway, you should check with your device maker or ISP for advisories about WPS security. If a fix isn’t available, plan for a replacement rather than waiting for a patch that may never arrive. Having a plan can reduce risk and keep your home network from being an easy target for nearby attackers.