Movistar and Orange routers found to have serious security vulnerabilities

Security researchers and the Spanish National Cybersecurity Institute (INCIBE) have identified critical vulnerabilities affecting several 4G routers used by major telecommunications providers, including Movistar and Orange.

The flaws stem from a component manufactured by Broadcom, specifically within the WPS Monitor application used to facilitate device connections. A memory overflow vulnerability allows an attacker within Wi-Fi range to execute malicious code on the device without needing a password or prior network access.

INCIBE has classified the incident with high importance, coordinating the disclosure of three vulnerabilities: two rated as high severity and one as medium severity. Identified affected models include the Askey RTF3505VW, Comtrend VG8050, and MitraStar GPT-2541GNAC. While there have been unverified claims regarding the use of artificial intelligence in discovering these flaws, no official source has confirmed such involvement.