CVE-2017-9417

CRITICAL

Broadcom BCM43xx Wi-Fi Firmware Broadpwn - Remote Code Execution

Title source: manual

Exploitation Summary

EIP tracks 2 public exploits for CVE-2017-9417. PoCs published by 649, mailinneberg.

AI-analyzed exploit summary This exploit targets a vulnerability in Broadcom Wi-Fi chips, allowing arbitrary memory writes and reads, which can lead to a denial-of-service (DoS) by crashing the device's main CPU kernel. The exploit is associated with Broadpwn2 and is designed to demonstrate the vulnerability's impact.

Description

Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.

Exploits (2)

exploitdb WORKING POC

by 649 · textdosandroid

https://www.exploit-db.com/exploits/44268

View Code ZIP pw:eip

This exploit targets a vulnerability in Broadcom Wi-Fi chips, allowing arbitrary memory writes and reads, which can lead to a denial-of-service (DoS) by crashing the device's main CPU kernel. The exploit is associated with Broadpwn2 and is designed to demonstrate the vulnerability's impact.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: Broadcom Wi-Fi chips (specific versions not specified)

No auth needed

Prerequisites: Physical proximity or network access to the target device with vulnerable Broadcom Wi-Fi chip

MITRE ATT&CK

T1499 - Endpoint Denial of Service

devstral-2 · analyzed Feb 16, 2026 Full analysis →

nomisec WRITEUP 51 stars

by mailinneberg · poc

https://github.com/mailinneberg/Broadpwn

View Code ZIP pw:eip

This repository provides instructions for exploiting CVE-2017-9417, a vulnerability in Broadcom's Wi-Fi chipsets affecting Android and iOS devices. It includes steps to replace firmware and references external resources for further details.