There's no CVE, so scanners and vendor feeds won't flag this Broadcom WPS bug. Compare your inventory with the affected-device table in Kaiser's broadcom-wps repo, which marks Cisco RV110W, RV130W, RV215W, RV340W and WAP121/125/150/361/371/571/571E/581 as confirmed, alongside ISP gateways from Proximus, VOO, Orange Belgium, KPN, Movistar and SFR. For firmware you've extracted, run the repo's YARA rules (yara -w -r broadcom_wps_monitor.yar extracted_firmware_dir); Kaiser notes they are triage aids, not proof. For live access points, his scapy fingerprinting script needs a Wi-Fi card in monitor mode, so only point it at networks you own or are authorized to test. Where a device is listed and the vendor has no fix, plan to replace it or move Wi-Fi to hardware you control. For ISP gateways, ask the ISP about a fix or bridge mode. The sources don't say whether turning WPS off in the admin UI is enough, so don't count on that alone.