2

Google has developed a fix for a critical remote code execution vulnerability in Broadcom Wi-Fi firmware. There is a huge amount of information (and possibly this) available around it, but as an end user my primary concern is this: how do I avoid being hacked while waiting for a patch?

4
  • According to the problem description you should be able to avoid it by switching Wifi off, but that's probably the only reliable workaround. Apr 13, 2017 at 12:05
  • 1
    To avoid getting compromised keep the Wi-Fi off and make sure it is actually off. Android has a feature where even if Wi-Fi is turned off it will still use it for location and (I'm sure) ad targeting/analytics for Google. This can be disabled as well. Apr 13, 2017 at 12:06
  • And as for the vulnerable phones: I don't think you will find a reliable listing of all the phones which both use Broadcom Wi-Fi and have the relevant feature enabled (and that's why I've marked the question as too broad). But if you want to know if your phone is affected contact your vendor. Apr 13, 2017 at 12:16
  • @SteffenUllrich Alright. I've removed the question about the models.
    – l0b0
    Apr 13, 2017 at 12:26

1 Answer 1

4

According to the detailed report this specific problem can be triggered by specifically constructed Wi-Fi packets. From my understanding this kind of attack should possible for an unauthorized attacker and it does not matter if the victim is associated with a Wi-Fi network or not. This means that the only workaround to protect a vulnerable device is too completely disable Wi-Fi.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .