Your iPhone / Android or devices using the BROADCOM's WI-FI Chipset could be vulnerable to Remote exploits (The hack, dubbed ‘Broadpwn’).
Remote exploits that compromise Android and iOS devices without user interaction have become an endangered species in recent years. Such exploits present a unique challenge: Without access to the rich scripting environment of the browser, exploit developers have been having a hard time bypassing mitigations such as DEP and ASLR.
But what happens when, underneath your heavily hardened OS, a separate chip parses all your Wi-Fi packets - and runs with no exploit mitigations whatsoever?
Meet Broadpwn, a vulnerability in Broadcom's Wi-Fi chipsets which affects millions of Android and iOS devices, and can be triggered remotely, without user interaction. The Broadcom BCM43xx family of Wi-Fi chips is found in an extraordinarily wide range of mobile devices - from various iPhone models, to HTC, LG, Nexus and practically the full range of Samsung flagship devices.
Black Hat USA will be addressing this in their conference this week.
Black Hat: In this talk, we'll take a deep dive into the internals of the BCM4354, 4358 and 4359 Wi-Fi chipsets, and explore the workings of the mysterious, closed-source HNDRTE operating system. Then, we'll plunge into the confusing universe of 802.11 standards in a quest to find promising attack surfaces.
Finally, we'll tell the story of how we found the bug and exploited it to achieve full code execution - and how we went on to leverage our control of the Wi-Fi chip in order to run code in the main application processor.
----------
Buried deep in Apple’s official iOS 10.3.3 security notes is something startling: iPhones have been vulnerable to hackers taking complete control of them simply via WiFi. The hack, dubbed ‘Broadpwn’, stems from Broadcom WiFi chips (model numbers BCM4354, 4358 and 4359) built into the vast majority of iPhones (Intel chips exist in some iPhone 7 and iPhone 7 Plus variants).
!!!!!!!!!! UPDATE NOW !!!!!!!!!!
How to Update?
Plug your device into power and connect to the Internet with Wi-Fi. Tap Settings > General > Software Update. Tap Download and Install.