The news
A 16-year-old security flaw in Broadcom Wi-Fi components still allows strangers to hijack routers remotely. Reports from two outlets confirm that millions of devices remain at risk because patches are hard to apply or unavailable on many models.
Context
The bug has existed since roughly 2010. Broadcom learned of the issue by 2018 according to a researcher cited in the coverage, yet the problem has not been eliminated across the installed base. Routers from multiple vendors rely on the affected chips, and the design of many consumer and small-business devices makes firmware updates infrequent or impossible once deployed.
The flaw affects Wi-Fi chips that sit inside routers sold under many brand names. Because the chips handle wireless traffic at a low level, an attacker who reaches the vulnerability can gain control without needing physical access to the device. The two reports agree that the installed base numbers in the millions, but neither supplies a precise count or a list of specific router models.
Detail
The Neowin report states that the flaw lets attackers take control without physical access. The Register adds that the chip maker was notified in 2018. Both sources note that the number of exposed routers reaches into the millions. No public details on the exact technical vector appear in the coverage, but the persistence of the issue points to challenges in distributing fixes through the supply chain of router manufacturers.
Protection remains difficult because many devices ship without ongoing support commitments. End users often cannot determine whether their hardware contains the vulnerable Broadcom silicon, and even when they can, replacement may be the only option. The reports do not provide a timeline for when the flaw was originally disclosed or any coordinated disclosure process.
The sources give no indication that Broadcom has released a comprehensive public advisory naming every affected chip revision. They also give no sign that router vendors have published a matching list of patched firmware versions. This absence leaves network owners without a straightforward way to test their own equipment.
Why it matters
This case shows how hardware-level flaws in widely used components can outlast the typical support cycle of finished products. Router owners who bought devices years ago now face continued exposure because the companies that assembled those devices have moved on. The researcher's claim that Broadcom knew about the problem in 2018 places responsibility on both the chip supplier and the device makers who integrated the chips. Without clearer disclosure of which models are affected, users cannot make informed decisions about replacement.
The situation underscores the gap between chip-level awareness and actual remediation in the field. Chip vendors often consider their duty complete once they notify direct customers, yet the customers in this chain are router assemblers whose own support windows close quickly. End users inherit the remaining risk with little visibility into the silicon inside their boxes.
The absence of fresh patches or a public list of vulnerable hardware leaves the issue unresolved for a large installed base. Network operators and home users alike must assume risk until either firmware becomes available or devices are retired. The reports indicate no disagreement on the core facts: the bug is old, still present, and hard to fix at scale.
When a component flaw survives for sixteen years, the practical result is that many households and small offices continue to operate routers that can be taken over from the outside. Replacement becomes the default defense, yet replacement itself carries cost and disruption. Until vendors publish concrete guidance on which devices carry the vulnerable Broadcom parts and which firmware versions close the hole, that burden stays on the owners.
---
Sources:
No comments yet