CVE-2018-19860

High

Description

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.

SeverityHigh
CVSS8.8
Exploit probability—
ProductBroadcom Bcm4335c0 Firmware
PublishedJun 7, 2019
First seenJun 7, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
broadcom bcm4335c0_firmware2012-12-11—
broadcom bcm43438a1_firmware2014-06-02—
cypress cyw20702a1kwfbg_firmwareNo range specified—
cypress cyw20702a1kwfbgt_firmwareNo range specified—
cypress cyw20702b0kwfbg_firmwareNo range specified—
cypress cyw20702b0kwfbgt_firmwareNo range specified—
cypress cyw20703ua1kffb1g_firmwareNo range specified—
cypress cyw20703ua1kffb1gt_firmwareNo range specified—
cypress cyw20704ua1kffb1g_firmwareNo range specified—
cypress cyw20704ua1kffb1gt_firmwareNo range specified—
cypress cyw20704ua2kffb1g_firmwareNo range specified—
cypress cyw20704ua2kffb1gt_firmwareNo range specified—
cypress cyw20705a1kwfbgt_firmwareNo range specified—
cypress cyw20705b0kwfbg_firmwareNo range specified—
cypress cyw20705b0kwfbgt_firmwareNo range specified—
cypress cyw20706ua1kffb1g_firmwareNo range specified—
cypress cyw20706ua1kffb1gt_firmwareNo range specified—
cypress cyw20706ua1kffb4g_firmwareNo range specified—
cypress cyw20706ua2kffb4g_firmwareNo range specified—
cypress cyw20706ua2kffb4gt_firmwareNo range specified—
cypress cyw20707a2kubgt_firmwareNo range specified—
cypress cyw20707ua1kffb1g_firmwareNo range specified—
cypress cyw20707ua1kffb4g_firmwareNo range specified—
cypress cyw20707ua1kffb4gt_firmwareNo range specified—
cypress cyw20707ua2kffb4g_firmwareNo range specified—
cypress cyw20707ua2kffb4gt_firmwareNo range specified—
cypress cyw20707va1pkwbgt_firmwareNo range specified—
cypress cyw20707va2pkwbgt_firmwareNo range specified—
cypress cyw20730a1kfbg_firmwareNo range specified—
cypress cyw20730a1kfbgt_firmwareNo range specified—
cypress cyw20730a1kml2g_firmwareNo range specified—
cypress cyw20730a1kml2gt_firmwareNo range specified—
cypress cyw20730a1kmlg_firmwareNo range specified—
cypress cyw20730a1kmlgt_firmwareNo range specified—
cypress cyw20730a2kfbg_firmwareNo range specified—
cypress cyw20730a2kfbgt_firmwareNo range specified—
cypress cyw20730a2kml2g_firmwareNo range specified—
cypress cyw20730a2kml2gt_firmwareNo range specified—
cypress cyw20733a1kfb1gt_firmwareNo range specified—
cypress cyw20733a2kfb1g_firmwareNo range specified—
cypress cyw20733a2kfb1gt_firmwareNo range specified—
cypress cyw20733a2kml1g_firmwareNo range specified—
cypress cyw20733a2kml1gt_firmwareNo range specified—
cypress cyw20733a3kfb1g_firmwareNo range specified—
cypress cyw20733a3kfb1gt_firmwareNo range specified—
cypress cyw20733a3kfb2gt_firmwareNo range specified—
cypress cyw20733a3kml1g_firmwareNo range specified—
cypress cyw20733a3kml1gt_firmwareNo range specified—
cypress cyw20734ua1kffb3g_firmwareNo range specified—
cypress cyw20734ua1kffb3gt_firmwareNo range specified—
cypress cyw20734ua2kffb3g_firmwareNo range specified—
cypress cyw20734ua2kffb3gt_firmwareNo range specified—
cypress cyw43438kubgt_firmwareNo range specified—
cypress cyw4343w1kubgt_firmwareNo range specified—
cypress cyw4343wkubgt_firmwareNo range specified—
cypress cyw4343wkwbgt_firmwareNo range specified—
cypress cyw4354kkwbgt_firmwareNo range specified—
cypress cyw4354xkubgt_firmwareNo range specified—
cypress cyw89071a1cubxgt_firmwareNo range specified—
cypress cyw89072brfb5g_firmwareNo range specified—
cypress cyw89072brfb5gt_firmwareNo range specified—
cypress cyw89335l2cubgt_firmwareNo range specified—
cypress cyw89335lcubgt_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.