[CLSTR]
< Back to all clusters
[TECHNOLOGY] · Belgium, Germany, Türkiye · 9 sources

started · updated

Part of situation: Broadcom router security vulnerabilities (3 clusters)

Broadcom Wi-Fi vulnerability ‘WPSplinter’ exposes millions of routers

WPSplinter Broadcom Wi-Fi Protected Setup router vulnerability Quentin Kaiser

Security researcher Quentin Kaiser has identified a critical vulnerability, dubbed ‘WPSplinter’, affecting millions of Wi-Fi routers worldwide. The flaw resides in legacy Broadcom firmware code responsible for handling Wi-Fi Protected Setup (WPS). By sending specially crafted messages, an attacker within radio range can trigger a buffer overflow to extract Wi-Fi keys from memory or execute remote shell commands without a password.

The vulnerability stems from a memory error in a legacy component that has existed since at least 2010. While Broadcom released a partial fix in 2018 and later recommended transitioning to the ‘hostapd’ open-source solution, many manufacturers continue to use the vulnerable code. This has created a significant gap in the software supply chain.

In Belgium alone, an estimated 1.5 million devices are affected, including gateways from providers such as Proximus, Orange, and VOO. The scope is global, with hardware from manufacturers including Cisco, TP-Link, Netgear, Sagemcom, Nokia, ZTE, and Zyxel potentially at risk. In Germany, models from Deutsche Telekom, such as the Speedport W 723V and W 724V, are among those identified as potentially vulnerable.

Entities

Broadcom · Cisco · Hexacon · Netgear · Orange Belgium · Proximus · Quentin Kaiser · TP-Link · Türk Telekom · Türksat · VOO

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

Broadcom routers vulnerable to WPSplinter flaw, researcher says [world-today-journal.com]
16-year-old Broadcom Wi-Fi flaw exposes millions of routers [itnerd.blog]
Уязвимост в стар код позволява атаки срещу рутери без Wi-Fi парола - Новини [mobilebulgaria.com]
Telekom, Vodafone und andere: Wer einen dieser Router besitzt, hat ein Problem [www.giga.de]
WLAN-Router von Telekom & Vodafone angreifbar: Bei diesen Routern bist du betroffen [www.inside-digital.de]
Milióny Wi-Fi routerov ohrozuje 16 rokov stará chyba, hackeri nepotrebujú ani heslo [www.sector.sk]
Türk Telekom ve Türksat Modemleri de Listede: 16 Yıllık Wi-Fi Açığı Parola Bile İstemiyor [www.tamindir.com]
WPSplinter açığı modem güvenliğini etkiliyor [www.teknoblog.com]
WPSplinter: 16 Jahre alte Router-Lücke gefährdet Millionen WLANs [www.bild.de]