Unpatched Broadcom Wi-Fi Flaw Ermöglicht Root-Zugriff auf Routern
Teaser aus der Quelle
Ein Fehler in Broadcoms Wi-Fi-Setup-Software ermöglicht es Angreifern im Funkbereich, auf Broadcom-basierten Routern als Root-Benutzer Code auszuführen, ohne Netzwerkpasswort oder Pairing. Der Sicherheitsforscher Quentin Kaiser demonstrierte den Angriff an Heim-Gateways von drei belgischen Internetanbietern, wobei in einem Fall das Wi-Fi-Passwort vom Gerät ausgelesen wurde.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei The Hacker News lesenMehr zu Unpatched
Weitere Advisories
- HochCVE-2026-100353kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter
- HochCVE-2026-100353kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter
- Ohne Bewertungosv:CVE-2026-100353kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter
- KritischCVE-2025-59851HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, whic…
- Ohne Bewertungosv:CVE-2026-35667OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts
- Ohne Bewertungosv:ECHO-ddb8-c818-edcaVulnerable code is not present in libraw 0.21.4 (the version shipped in Debian trixie). The CVE describes a heap out-of-bounds write in HuffTable::initval (src/decompressors/losslessjpeg.cpp), reachable via LibRaw::sony_ycbcr_load_raw -> LibRaw_LjpegDecompressor::initialize -> HuffTable::initval. None of those symbols exist in 0.21.4: the src/decompressors/ directory, the LibRaw_LjpegDecompressor class, and the sony_ycbcr_load_raw entry point were all introduced together in libraw 0.22.0. Empirically confirmed by running the public PoC from https://github.com/biniamf/pocs/tree/main/libraw_lljpeg against an ASan build of unpatched libraw 0.21.4: the file is rejected at open with "Unsupported file format or not RAW file"; the same PoC reproduces the heap-buffer-overflow in 0.22.0 with the stack trace from the Talos report.
- HochCVE-2024-52798path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x
- Ohne Bewertungosv:CVE-2024-52798path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x
Weitere News-Einträge
- PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatchedNewsThe Register — Security
- PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security AlertNewsThe Hacker News
- PSA: Patch your Plex media server before someone hacks itNewsArs Technica — Security
- EU Grocers Pay a Steep Price for Unpatched Fridge FirmwareNewsDark Reading
- Unpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoNewsBleepingComputer
- Unpatched AhsayCBS Vulnerabilities Exploited in the WildNewsSecurityWeek
- Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code RemotelyNewsThe Hacker News
- Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery PathNewsThe Hacker News
Quelle: https://thehackernews.com/2026/10/unpatched-broadcom-wi-fi-flaw-lets.html
ID