Lucene search

[email protected]CVE-2018-19860

HistoryJun 07, 2019 - 5:29 p.m.

CVE-2018-19860

2019-06-0717:29:00

CWE-732

[email protected]

web.nvd.nist.gov

cve-2018-19860

broadcom

firmware

nexus 5

raspberry pi 3

bcm4335c0

bcm43438a1

security vulnerability

nvd

memory execution

lmp command

hci command

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.2%

JSON

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.

CPENameOperatorVersion
broadcom:bcm4335c0_firmwarebroadcom bcm4335c0 firmwareeq2012-12-11
broadcom:bcm43438a1_firmwarebroadcom bcm43438a1 firmwareeq2014-06-02
cypress:cyw20702a1kwfbg_firmwarecypress cyw20702a1kwfbg firmwareeq-
cypress:cyw20702a1kwfbgt_firmwarecypress cyw20702a1kwfbgt firmwareeq-
cypress:cyw20702b0kwfbg_firmwarecypress cyw20702b0kwfbg firmwareeq-
cypress:cyw20702b0kwfbgt_firmwarecypress cyw20702b0kwfbgt firmwareeq-
cypress:cyw20703ua1kffb1g_firmwarecypress cyw20703ua1kffb1g firmwareeq-
cypress:cyw20703ua1kffb1gt_firmwarecypress cyw20703ua1kffb1gt firmwareeq-
cypress:cyw20704ua1kffb1g_firmwarecypress cyw20704ua1kffb1g firmwareeq-
cypress:cyw20704ua1kffb1gt_firmwarecypress cyw20704ua1kffb1gt firmwareeq-

CPE	Name	Operator	Version
broadcom:bcm4335c0_firmware	broadcom bcm4335c0 firmware	eq	2012-12-11
broadcom:bcm43438a1_firmware	broadcom bcm43438a1 firmware	eq	2014-06-02
cypress:cyw20702a1kwfbg_firmware	cypress cyw20702a1kwfbg firmware	eq	-
cypress:cyw20702a1kwfbgt_firmware	cypress cyw20702a1kwfbgt firmware	eq	-
cypress:cyw20702b0kwfbg_firmware	cypress cyw20702b0kwfbg firmware	eq	-
cypress:cyw20702b0kwfbgt_firmware	cypress cyw20702b0kwfbgt firmware	eq	-
cypress:cyw20703ua1kffb1g_firmware	cypress cyw20703ua1kffb1g firmware	eq	-
cypress:cyw20703ua1kffb1gt_firmware	cypress cyw20703ua1kffb1gt firmware	eq	-
cypress:cyw20704ua1kffb1g_firmware	cypress cyw20704ua1kffb1g firmware	eq	-
cypress:cyw20704ua1kffb1gt_firmware	cypress cyw20704ua1kffb1gt firmware	eq	-

Rows per page:

1-10 of 631

References

seclists.org/fulldisclosure/2019/Aug/11

seclists.org/fulldisclosure/2019/Jul/22

seclists.org/bugtraq/2019/Aug/21

source.android.com/security/bulletin/2019-05-01

support.apple.com/kb/HT210348

www.broadcom.com/support/resources/product-security-center

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.2%

JSON

Related for CVE-2018-19860

prion1 openvas1 nessus2 apple2