A bug that has been known for 16 years now threatens millions of WiFi routers
Millions of WiFi routers are vulnerable to a security vulnerability that has been known for years. The vulnerability, called WPSplinter, is found in Broadcom software that manufacturers use to set up wireless networks.
Attack from a distance
Under certain conditions, attackers can use the bug to remotely execute malicious code on affected devices and take control of a router. After Declarations According to security researcher Quentin Kaiser, there are currently no security updates available for the devices he examined. Like IT magazine The Register reported, the vulnerability affects Broadcom’s implementation of Wi-Fi Protected Setup (WPS). The technology is intended to make it easier for users to connect devices to a WLAN without having to manually enter the network password. According to Kaiser, attackers can send specially crafted WPS messages to vulnerable routers and thus trigger memory errors. This can enable the execution of your own code without the rightful owner having to take action.
During his investigations, the researcher was able to detect corresponding attacks against several routers. Devices from Belgian providers such as Proximus and Orange as well as routers from Netgear and Technicolor were affected. In Belgium alone, more than 1.5 million devices could be at risk, it said. It is still unclear how many routers worldwide are affected. The age of the error in question is quite remarkable: it has basically been known since 2010.
Broadcom released a partial fix in 2018, but later recommended that manufacturers replace their own software with the open-source alternative hostapd. Apparently not all providers followed this recommendation. For older routers that are no longer supported, further security updates are unlikely.
Broadcom refers to third parties
Kaiser confidentially reported the vulnerability to Broadcom in July, giving the company the usual 90 days to fix it. Initially, the manufacturer referred to an available patch and recommended contacting the device providers. Attempts by the security researcher to get a reaction from the affected providers and the security organization CERT/CC did not lead to any resounding results. According to Kaiser’s current knowledge, none of the routers examined were secured. There is currently no evidence of attacks that have already taken place in the wild. However, that could change at any time.
Users should therefore first determine the exact router model and update the firmware to the latest version. It is then advisable to ask the manufacturer or provider whether the device is affected. If routers are no longer supported, replacing them may make sense. According to Kaiser, simply disabling WPS may not be enough because the attack does not necessarily require a fully completed WPS connection process.
Amit Gohar is Technical writer at ResearchSnipers.com, he is well versed Technology News writer, he has completed is MS computer Science in 2020. He can be reached at amit.g@researchsnipers.com
