The Garmin WDU devices running versions v1 1.4.6 and v2 5.0 have a vulnerability that permits cross-site origin WebSocket hijacking via their locally served web interface. The WebSocket connections control device settings, including administrative functions, which an attacker can hijack if the victim accesses a malicious website from a multihomed host connected to both the Garmin Marine Network and an external network. This attack vector allows an attacker to gain full control over the WDU device. No CVSS score or remediation information is currently provided.

Successful exploitation allows a network attacker to take full control of the Garmin WDU device, including administrative settings, potentially compromising the device's operation and security. The attack requires specific network conditions and victim interaction with a malicious website. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid accessing untrusted websites from multihomed hosts connected to the Garmin Marine Network and consider network segmentation to limit exposure. Monitor vendor communications for updates on patches or mitigations.