Cypress Semiconductor PSoC Creator BLE Security Feature Issue Vulnerability

Cypress Semiconductor PSoC Creator BLE is a programmable embedded system-on-chip with integrated Bluetooth Low Energy BLE from Cypress Semiconductor. A security signature issue vulnerability exists in Cypress Semiconductor PSoC Creator 4.2 BLE prior to version 3.64, which stems from the BLE...

CVE-2020-11957

The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...

CVE-2020-11957

The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...

Code injection

The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...

CVE-2020-11957

The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...

CVE-2020-11957

CVE-2020-11957 affects Cypress PSoC Creator BLE 4.2 component, where versions before 3.64 generate a 128-bit Pairing Random with insufficient entropy. This weak random value enables a nearby attacker to perform a MITM during BLE pairing for both LE Secure Connections and LE Legacy Pairing (authen...

CVE-2019-13916

An issue was discovered in Cypress formerly Broadcom WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy BLE packet is received, it is copied into a Heap ThreadX Block buffer. The buffer allocated in dhmulpgetRxBuffer is four bytes too small to hold the maximum of 255 bytes plus...

CVE-2019-13916

An issue was discovered in Cypress formerly Broadcom WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy BLE packet is received, it is copied into a Heap ThreadX Block buffer. The buffer allocated in dhmulpgetRxBuffer is four bytes too small to hold the maximum of 255 bytes plus...

Heap overflow

An issue was discovered in Cypress formerly Broadcom WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy BLE packet is received, it is copied into a Heap ThreadX Block buffer. The buffer allocated in dhmulpgetRxBuffer is four bytes too small to hold the maximum of 255 bytes plus...

CVE-2019-13916

CVE-2019-13916 affects Cypress/WICED Studio 6.2 on CYW20735B1 and CYW20819A1. A BLE packet received is copied into a heap (ThreadX Block) buffer; the dhmulp_getRxBuffer allocation is four bytes too small for the max 255 bytes plus headers. This can corrupt a pointer in the g_mm_BLEDeviceToHostPoo...

CVE-2019-13916

An issue was discovered in Cypress formerly Broadcom WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy BLE packet is received, it is copied into a Heap ThreadX Block buffer. The buffer allocated in dhmulpgetRxBuffer is four bytes too small to hold the maximum of 255 bytes plus...

Wi-Fi Chip Vulnerability

There's a vulnerability in Wi-Fi hardware that breaks the encryption: The vulnerability exists in Wi-Fi chips made by Cypress Semiconductor and Broadcom, the latter a chipmaker Cypress acquired in 2016. The affected devices include iPhones, iPads, Macs, Amazon Echos and Kindles, Android devices,...

Billions of Devices Open to Wi-Fi Eavesdropping Attacks

SAN FRANCISCO — A serious vulnerability in Wi-Fi chips has been discovered that affects billions of devices worldwide, according to researchers. It allows attackers to eavesdrop on Wi-Fi communications. The bug CVE-2019-15126 stems from the use of an all-zero encryption key in chips made by...

New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices

Cybersecurity researchers today uncovered a new high-severity hardware vulnerability residing in the widely-used Wi-Fi chips manufactured by Broadcom and Cypress—apparently powering over a billion devices, including smartphones, tablets, laptops, routers, and IoT gadgets. Dubbed 'Kr00k ' and...

New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices

Cybersecurity researchers today uncovered a new high-severity hardware vulnerability residing in the widely-used Wi-Fi chips manufactured by Broadcom and Cypress—apparently powering over a billion devices, including smartphones, tablets, laptops, routers, and IoT gadgets. Dubbed 'Kr00k' and track...

ww.cypresscreekcattlefarm.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1103681 Security Researcher error404 Helped patch 532 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

A Dozen Vulnerabilities Affect Millions of Bluetooth LE Powered Devices

A team of cybersecurity researchers late last week disclosed the existence of 12 potentially severe security vulnerabilities, collectively named 'SweynTooth,' affecting millions of Bluetooth-enabled wireless smart devices worldwide—and worryingly, a few of which haven't yet been patched. All...

CVE-2019-16336

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers in radio range to cause a denial of service crash via a crafted BLE Li...

CVE-2019-16336

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers in radio range to cause a denial of service crash via a crafted BLE Li...

Design/Logic Flaw

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers in radio range to cause a denial of service crash via a crafted BLE Li...