This vulnerability involves a cross-site origin WebSocket hijacking attack against the Garmin WDU's local web interface. The WDU uses WebSockets to manage settings, including administrative controls. An attacker can exploit this by luring a user who is on a multihomed host (connected to both the Garmin Marine Network and an external network) to visit a malicious website, enabling the attacker to hijack the WebSocket connection and gain full control over the WDU device. The CVSS score is 9.3 (critical), indicating high impact on confidentiality and integrity, with no impact on availability. There is no vendor advisory or patch information available at this time.

Successful exploitation allows an attacker to gain full control over the Garmin WDU device's administrative settings via hijacked WebSocket connections. This compromises the confidentiality and integrity of the device's configuration and control, potentially leading to unauthorized changes or disruptions in device operation. Availability is not directly impacted according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid accessing untrusted websites from hosts connected simultaneously to the Garmin Marine Network and other networks. Network segmentation to isolate the Garmin Marine Network from general-purpose networks may reduce risk. Monitor vendor channels for updates and apply patches promptly once released.