Broadcom Wi-Fi bug turns sweet 16, still lets strangers hijack your router

What happened

Security researcher Quentin Kaiser found two bugs in Broadcom's Wi-Fi software. He named the problem "WPSplinter." The bugs date back to at least 2010. A fix came out eight years later, but Kaiser says it did not fully solve the problem. A person within Wi-Fi range could run their own code on a router. They would not need the Wi-Fi password, and the owner would not have to do anything.

Key numbers and facts

• Kaiser estimates about 1.56 million routers in Belgium may be affected: about 850,000 Proximus, 500,000 VOO, and 210,000 Orange Belgium.
• In one test, he took the Wi-Fi password from a router's memory and used it to join the network.
• He first reported the bugs to Broadcom on July 18, and sent a second report on July 27.
• Kaiser says the company knew about the flaw in 2018 and released a partial fix without telling the public.
• Kaiser admits the device counts are rough estimates.

Some background

Wi-Fi Protected Setup (WPS) is a feature that lets you connect a device to Wi-Fi without typing the password. Broadcom's chips are used in many routers made by many companies. So the problem may reach far beyond Belgium. Some older routers may never get a fix. Kaiser calls this a "forever day" flaw.

Why it matters

A router sits at the center of a home or office network. If a stranger can take control of one, they may be able to watch traffic or reach other devices. Many of these routers may not get updates. Users may not know they are at risk until a fix is available.

What to watch

• Whether router makers like Proximus, VOO, and Orange update their devices.
• Whether Broadcom gives a CVE identifier, a public code for the flaw.
• Whether Belgium's cybersecurity authorities take action.
• Whether manufacturers switch to the open-source hostapd software, as Broadcom suggested.