Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

A security researcher has disclosed a zero-day flaw in Broadcom’s Wi-Fi setup software that allows attackers within radio range to execute arbitrary code with root privileges on affected routers. The attack bypasses authentication and network passwords, successfully compromising gateways provided by multiple ISPs.