Lucene search

[email protected]NVD:CVE-2018-19860

HistoryJun 07, 2019 - 5:29 p.m.

CVE-2018-19860

2019-06-0717:29:00

CWE-732

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

53.3%

JSON

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.

Affected configurations

Nvd

Node

broadcombcm4335c0_firmwareMatch2012-12-11

AND

broadcombcm4335c0Match-

Node

broadcombcm43438a1_firmwareMatch2014-06-02

AND

broadcombcm43438a1Match-

Node

cypresscyw20702a1kwfbg_firmwareMatch-

AND

cypresscyw20702a1kwfbgMatch-

Node

cypresscyw20702a1kwfbgt_firmwareMatch-

AND

cypresscyw20702a1kwfbgtMatch-

Node

cypresscyw20702b0kwfbg_firmwareMatch-

AND

cypresscyw20702b0kwfbgMatch-

Node

cypresscyw20702b0kwfbgt_firmwareMatch-

AND

cypresscyw20702b0kwfbgtMatch-

Node

cypresscyw20703ua1kffb1g_firmwareMatch-

AND

cypresscyw20703ua1kffb1gMatch-

Node

cypresscyw20703ua1kffb1gt_firmwareMatch-

AND

cypresscyw20703ua1kffb1gtMatch-

Node

cypresscyw20704ua1kffb1g_firmwareMatch-

AND

cypresscyw20704ua1kffb1gMatch-

Node

cypresscyw20704ua1kffb1gt_firmwareMatch-

AND

cypresscyw20704ua1kffb1gtMatch-

Node

cypresscyw20704ua2kffb1g_firmwareMatch-

AND

cypresscyw20704ua2kffb1gMatch-

Node

cypresscyw20704ua2kffb1gt_firmwareMatch-

AND

cypresscyw20704ua2kffb1gtMatch-

Node

cypresscyw20705a1kwfbgt_firmwareMatch-

AND

cypresscyw20705a1kwfbgtMatch-

Node

cypresscyw20705b0kwfbg_firmwareMatch-

AND

cypresscyw20705b0kwfbgMatch-

Node

cypresscyw20705b0kwfbgt_firmwareMatch-

AND

cypresscyw20705b0kwfbgtMatch-

Node

cypresscyw20706ua1kffb1g_firmwareMatch-

AND

cypresscyw20706ua1kffb1gMatch-

Node

cypresscyw20706ua1kffb1gt_firmwareMatch-

AND

cypresscyw20706ua1kffb1gtMatch-

Node

cypresscyw20706ua1kffb4g_firmwareMatch-

AND

cypresscyw20706ua1kffb4gMatch-

Node

cypresscyw20706ua2kffb4g_firmwareMatch-

AND

cypresscyw20706ua2kffb4gMatch-

Node

cypresscyw20706ua2kffb4gt_firmwareMatch-

AND

cypresscyw20706ua2kffb4gtMatch-

Node

cypresscyw20707a2kubgt_firmwareMatch-

AND

cypresscyw20707a2kubgtMatch-

Node

cypresscyw20707ua1kffb1g_firmwareMatch-

AND

cypresscyw20707ua1kffb1gMatch-

Node

cypresscyw20707ua1kffb4g_firmwareMatch-

AND

cypresscyw20707ua1kffb4gMatch-

Node

cypresscyw20707ua1kffb4gt_firmwareMatch-

AND

cypresscyw20707ua1kffb4gtMatch-

Node

cypresscyw20707ua2kffb4g_firmwareMatch-

AND

cypresscyw20707ua2kffb4gMatch-

Node

cypresscyw20707ua2kffb4gt_firmwareMatch-

AND

cypresscyw20707ua2kffb4gtMatch-

Node

cypresscyw20707va1pkwbgt_firmwareMatch-

AND

cypresscyw20707va1pkwbgtMatch-

Node

cypresscyw20707va2pkwbgt_firmwareMatch-

AND

cypresscyw20707va2pkwbgtMatch-

Node

cypresscyw20730a1kfbg_firmwareMatch-

AND

cypresscyw20730a1kfbgMatch-

Node

cypresscyw20730a1kfbgt_firmwareMatch-

AND

cypresscyw20730a1kfbgtMatch-

Node

cypresscyw20730a1kml2g_firmwareMatch-

AND

cypresscyw20730a1kml2gMatch-

Node

cypresscyw20730a1kml2gt_firmwareMatch-

AND

cypresscyw20730a1kml2gtMatch-

Node

cypresscyw20730a1kmlg_firmwareMatch-

AND

cypresscyw20730a1kmlgMatch-

Node

cypresscyw20730a1kmlgt_firmwareMatch-

AND

cypresscyw20730a1kmlgtMatch-

Node

cypresscyw20730a2kfbg_firmwareMatch-

AND

cypresscyw20730a2kfbgMatch-

Node

cypresscyw20730a2kfbgt_firmwareMatch-

AND

cypresscyw20730a2kfbgtMatch-

Node

cypresscyw20730a2kml2g_firmwareMatch-

AND

cypresscyw20730a2kml2gMatch-

Node

cypresscyw20730a2kml2gt_firmwareMatch-

AND

cypresscyw20730a2kml2gtMatch-

Node

cypresscyw20733a1kfb1gt_firmwareMatch-

AND

cypresscyw20733a1kfb1gtMatch-

Node

cypresscyw20733a2kfb1g_firmwareMatch-

AND

cypresscyw20733a2kfb1gMatch-

Node

cypresscyw20733a2kfb1gt_firmwareMatch-

AND

cypresscyw20733a2kfb1gtMatch-

Node

cypresscyw20733a2kml1g_firmwareMatch-

AND

cypresscyw20733a2kml1gMatch-

Node

cypresscyw20733a2kml1gt_firmwareMatch-

AND

cypresscyw20733a2kml1gtMatch-

Node

cypresscyw20733a3kfb1g_firmwareMatch-

AND

cypresscyw20733a3kfb1gMatch-

Node

cypresscyw20733a3kfb1gt_firmwareMatch-

AND

cypresscyw20733a3kfb1gtMatch-

Node

cypresscyw20733a3kfb2gt_firmwareMatch-

AND

cypresscyw20733a3kfb2gtMatch-

Node

cypresscyw20733a3kml1g_firmwareMatch-

AND

cypresscyw20733a3kml1gMatch-

Node

cypresscyw20733a3kml1gt_firmwareMatch-

AND

cypresscyw20733a3kml1gtMatch-

Node

cypresscyw20734ua1kffb3g_firmwareMatch-

AND

cypresscyw20734ua1kffb3gMatch-

Node

cypresscyw20734ua1kffb3gt_firmwareMatch-

AND

cypresscyw20734ua1kffb3gtMatch-

Node

cypresscyw20734ua2kffb3g_firmwareMatch-

AND

cypresscyw20734ua2kffb3gMatch-

Node

cypresscyw20734ua2kffb3gt_firmwareMatch-

AND

cypresscyw20734ua2kffb3gtMatch-

Node

cypresscyw43438kubgt_firmwareMatch-

AND

cypresscyw43438kubgtMatch-

Node

cypresscyw4343w1kubgt_firmwareMatch-

AND

cypresscyw4343w1kubgtMatch-

Node

cypresscyw4343wkubgt_firmwareMatch-

AND

cypresscyw4343wkubgtMatch-

Node

cypresscyw4343wkwbgt_firmwareMatch-

AND

cypresscyw4343wkwbgtMatch-

Node

cypresscyw4354kkwbgt_firmwareMatch-

AND

cypresscyw4354kkwbgtMatch-

Node

cypresscyw4354xkubgt_firmwareMatch-

AND

cypresscyw4354xkubgtMatch-

Node

cypresscyw89071a1cubxgt_firmwareMatch-

AND

cypresscyw89071a1cubxgtMatch-

Node

cypresscyw89072brfb5g_firmwareMatch-

AND

cypresscyw89072brfb5gMatch-

Node

cypresscyw89072brfb5gt_firmwareMatch-

AND

cypresscyw89072brfb5gtMatch-

Node

cypresscyw89335l2cubgt_firmwareMatch-

AND

cypresscyw89335l2cubgtMatch-

Node

cypresscyw89335lcubgt_firmwareMatch-

AND

cypresscyw89335lcubgtMatch-

VendorProductVersionCPE
broadcombcm4335c0_firmware2012-12-11cpe:2.3:o:broadcom:bcm4335c0_firmware:2012-12-11:*:*:*:*:*:*:*
broadcombcm4335c0-cpe:2.3:h:broadcom:bcm4335c0:-:*:*:*:*:*:*:*
broadcombcm43438a1_firmware2014-06-02cpe:2.3:o:broadcom:bcm43438a1_firmware:2014-06-02:*:*:*:*:*:*:*
broadcombcm43438a1-cpe:2.3:h:broadcom:bcm43438a1:-:*:*:*:*:*:*:*
cypresscyw20702a1kwfbg_firmware-cpe:2.3:o:cypress:cyw20702a1kwfbg_firmware:-:*:*:*:*:*:*:*
cypresscyw20702a1kwfbg-cpe:2.3:h:cypress:cyw20702a1kwfbg:-:*:*:*:*:*:*:*
cypresscyw20702a1kwfbgt_firmware-cpe:2.3:o:cypress:cyw20702a1kwfbgt_firmware:-:*:*:*:*:*:*:*
cypresscyw20702a1kwfbgt-cpe:2.3:h:cypress:cyw20702a1kwfbgt:-:*:*:*:*:*:*:*
cypresscyw20702b0kwfbg_firmware-cpe:2.3:o:cypress:cyw20702b0kwfbg_firmware:-:*:*:*:*:*:*:*
cypresscyw20702b0kwfbg-cpe:2.3:h:cypress:cyw20702b0kwfbg:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	bcm4335c0_firmware	2012-12-11	cpe:2.3:o:broadcom:bcm4335c0_firmware:2012-12-11:::::::*
broadcom	bcm4335c0	-	cpe:2.3:h:broadcom:bcm4335c0:-:::::::*
broadcom	bcm43438a1_firmware	2014-06-02	cpe:2.3:o:broadcom:bcm43438a1_firmware:2014-06-02:::::::*
broadcom	bcm43438a1	-	cpe:2.3:h:broadcom:bcm43438a1:-:::::::*
cypress	cyw20702a1kwfbg_firmware	-	cpe:2.3:o:cypress:cyw20702a1kwfbg_firmware:-:::::::*
cypress	cyw20702a1kwfbg	-	cpe:2.3:h:cypress:cyw20702a1kwfbg:-:::::::*
cypress	cyw20702a1kwfbgt_firmware	-	cpe:2.3:o:cypress:cyw20702a1kwfbgt_firmware:-:::::::*
cypress	cyw20702a1kwfbgt	-	cpe:2.3:h:cypress:cyw20702a1kwfbgt:-:::::::*
cypress	cyw20702b0kwfbg_firmware	-	cpe:2.3:o:cypress:cyw20702b0kwfbg_firmware:-:::::::*
cypress	cyw20702b0kwfbg	-	cpe:2.3:h:cypress:cyw20702b0kwfbg:-:::::::*

Rows per page:

1-10 of 1261

References

seclists.org/fulldisclosure/2019/Aug/11

seclists.org/fulldisclosure/2019/Jul/22

seclists.org/bugtraq/2019/Aug/21

source.android.com/security/bulletin/2019-05-01

support.apple.com/kb/HT210348

www.broadcom.com/support/resources/product-security-center

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

53.3%

JSON

Related for NVD:CVE-2018-19860

cve1 cvelist1 prion1 openvas1 nessus2 apple2