A memory-corruption bug in Broadcom’s Wi-Fi Protected Setup code lets anyone within radio range run code as root on affected routers and gateways, with no password. Broadcom will not assign a CVE, older eCos chips have no fix, and the researcher estimates millions of devices are exposed.
