CVE-2019-9500

The CVE set concerns Broadcom brcmfmac WiFi driver flaws. CVE-2019-9500 is a heap buffer overflow in brcmf_wowl_nd_results triggered when Wake-on-WLAN is configured (pre-commit 1b5e2423164b3670e8bc9174e4762d297990deff); exploitation could enable arbitrary code execution on affected hosts or cause...

CVE-2019-9503 Broadcom brcmfmac driver is vulnerable to a frame validation bypass

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and unprocessed. I...

CVE-2019-9503

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and unprocessed. I...

The vulnerability of the wlc_wpa_plumb_gtk driver for Broadcom Wi-Fi devices allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the wlcwpaplumbgtk driver for Broadcom Wi-Fi devices is related to buffer overflows in the “heap”. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a service failure by sending specially crafted Wi-Fi packets containing data...

The vulnerability of the wlc_wpa_sup_eapol driver from Broadcom Wi-Fi devices allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the wlcwpasupeapol driver for Broadcom Wi-Fi devices is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending specially crafted Wi-Fi packets containing data exceeding 32 bytes...

Multiple vendor based Broadcom cable modems buffer overflow vulnerability

Sagemcom F@st 5260, Sagemcom F@st 3890 etc. is a router.Technicolor TC7230 STEB is a wireless router. A buffer overflow vulnerability exists in Broadcom cable modems based on multiple vendors. A remote attacker could execute arbitrary code in the kernel via JavaScript running in the victim's...

BSA-2020-896

Security Advisory ID : BSA-2020-896 Component : spectrum analyzer Revision : 1.0: Final A group of Security Researchers havereleased a vulnerability namedCable Haunt. According to the researchers,Cable Haunt was found in Broadcom Cable modems and affects various manufacturers across the world. Mo...

CVE-2019-19494

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21T4, Sagemcom F@...

CVE-2019-19494

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21T4, Sagemcom F@...

Buffer overflow

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21T4, Sagemcom F@...

CVE-2019-19494

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21T4, Sagemcom F@...

CVE-2019-19494

CVE-2019-19494 describes a buffer overflow in Broadcom-based cable modems that enables remote code execution at the kernel level via JavaScript in a victim’s browser. Affected devices include Sagemcom F@st 3890 (before 50.10.21_T4; before 05.76.6.3f), Sagemcom F@st 3686 (3.428.0; 4.83.0), NETGEAR...

USN-4225-1 linux, linux-aws, linux-azure, linux-azure-5.3, linux-gcp, linux-gcp-5.3, linux-kvm, linux-oracle, linux-raspi2 vulnerabilities

It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14895, CVE-2019-14901 It was discovered that a...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4225-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4225-1 advisory. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use...

Broadcom CA Client Automation Agent for Windows Elevation of Privilege Vulnerability

Broadcom CA Client Automation is a suite of IT asset management solutions from Broadcom, Inc. Agent for Windows is a Windows-side agent program. A security vulnerability exists in Broadcom CA Client Automation Agent for Windows. A local attacker could exploit this vulnerability to gain elevated...

Broadcom CA Client Automation CVE-2019-19231 Local Privilege Escalation Vulnerability

Description Broadcom CA Client Automation is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to execute arbitrary command with elevated privileges on the affected system. Broadcom CA Client Automation versions 14.0, 14.1, 14.2, 14.3 are vulnerable...

Unspecified Vulnerability in Broadcom CA Automic Sysload

Broadcom CA Automic Sysload is a device load monitoring system from Broadcom USA. The system supports performance management, performance diagnostics and system evaluation. A security vulnerability exists in Broadcom CA Automic Sysload that can be exploited by an attacker to execute arbitrary...

kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results

If the Wake-up on Wireless LAN functionality is configured in the brcmfmac driver, which only works with Broadcom FullMAC chipsets, a malicious event frame can be constructed to trigger a heap buffer overflow in the brcmfwowlndresults function. This vulnerability can be exploited by compromised...

Broadcom CA Automic Sysload CVE-2019-19518 Arbitrary Command Execution Vulnerability

Description Broadcom CA Automic Sysload is prone to an arbitrary command-execution vulnerability. An attacker can exploit this issue to execute arbitrary system command on the affected system. This may aid in further attacks. CA Automic Sysload versions 5.6.0, 5.8.0, 5.8.1, 6.0.0, 6.0.1, 6.1.2 ar...

Broadcom CA Privileged Access Manager Remote Command Execution (CVE-2018-9021; CVE-2018-9022)

A remote code execution vulnerability exists in Broadcom CA Privileged Access Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...