Garmin WDU Cross-Site Origin WebSocket Hijacking Vulnerability

A cross-site origin WebSocket hijacking vulnerability has been identified in the Garmin WDU, specifically in versions 1 1.4.6 and 2 5.0. This vulnerability allows a network attacker to gain full control of a WDU by exploiting WebSockets, which are used to manage various settings, including administrative controls. The attack requires the victim to be using a web browser on a multihomed host with local interfaces on the Garmin Marine Network and another network, and to visit a malicious third-party website created by the attacker.

Impact

Exploitation of this vulnerability allows a network attacker to take complete control of the affected WDU device.

Remediation

Users can update to Garmin WDU version 7.00, released on April 2, 2026, which addresses this vulnerability.