SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2018-19860

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as…

HIGH 8.8EPSS 1.02%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.02%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.

CVSS 3.0
8.8 HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
1.02% probability · 61th percentile
CISA KEV
Not listed
Weakness
CWE-732
Affected
broadcom/bcm4335c0 firmware · broadcom/bcm43438a1 firmware · cypress/cyw20702a1kwfbg firmware · cypress/cyw20702a1kwfbgt firmware · cypress/cyw20702b0kwfbg firmware · cypress/cyw20702b0kwfbgt firmware · cypress/cyw20703ua1kffb1g firmware · cypress/cyw20703ua1kffb1gt firmware · cypress/cyw20704ua1kffb1g firmware · cypress/cyw20704ua1kffb1gt firmware · cypress/cyw20704ua2kffb1g firmware · cypress/cyw20704ua2kffb1gt firmware · cypress/cyw20705a1kwfbgt firmware · cypress/cyw20705b0kwfbg firmware · cypress/cyw20705b0kwfbgt firmware · cypress/cyw20706ua1kffb1g firmware · cypress/cyw20706ua1kffb1gt firmware · cypress/cyw20706ua1kffb4g firmware · cypress/cyw20706ua2kffb4g firmware · cypress/cyw20706ua2kffb4gt firmware · +40 more
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.