AT&T, Xfinity routers flagged for 16-year-old Wi-Fi security flaw

Researcher Quentin Kaiser has flagged routers from AT&T, CenturyLink, Frontier and Xfinity for running Broadcom’s 16-year-old flawed Wi-Fi Protected Setup code, based on firmware scans. He said attackers within Wi-Fi range could exploit the flaw without a password, though he knows of no real-world attacks. Broadcom replaced the code in 2018 but declined to assign a CVE, Kaiser said.