Broadcom Wi-Fi flaw may affect millions of access points

Researcher Quentin Kaiser found an unpatched flaw in Broadcom Wi-Fi software used in routers and access points.

The flaw has existed since at least 2010 and can let an attacker within Wi-Fi range run code without knowing the network password or completing WPS registration.

Kaiser demonstrated that attackers could retrieve a device's stored Wi-Fi key and send it over the air.

The issue may affect millions of Broadcom-based devices across products from companies including Cisco, TP-Link, Netgear and Nokia, though the exact impact depends on the device and its software.

Broadcom supplied an incomplete fix in 2018 and later recommended moving to a different software component, but some devices may remain vulnerable if their makers do not make that change.

The flaw is not listed in the CVE database, and Kaiser says Broadcom declined to assign it a CVE number.

Device owners should check with their manufacturer or internet provider about updated firmware; the available information does not say when fixes will arrive.