CVE-2018-19860 : Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.

Published 2019-06-07 17:29:01

Updated 2020-08-24 17:37:01

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2018-19860

Broadcom » Bcm4335c0 Firmware » Version: 2012-12-11
cpe:2.3:o:broadcom:bcm4335c0_firmware:2012-12-11:*:*:*:*:*:*:*
Matching versions
When used together with: Broadcom » Bcm4335c0 » Version: N/A
Broadcom » Bcm43438a1 Firmware » Version: 2014-06-02
cpe:2.3:o:broadcom:bcm43438a1_firmware:2014-06-02:*:*:*:*:*:*:*
Matching versions
When used together with: Broadcom » Bcm43438a1 » Version: N/A
Cypress » Cyw20702a1kwfbg Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20702a1kwfbg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20702a1kwfbg » Version: N/A
Cypress » Cyw20702a1kwfbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20702a1kwfbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20702a1kwfbgt » Version: N/A
Cypress » Cyw20702b0kwfbg Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20702b0kwfbg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20702b0kwfbg » Version: N/A
Cypress » Cyw20702b0kwfbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20702b0kwfbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20702b0kwfbgt » Version: N/A
Cypress » Cyw20703ua1kffb1g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20703ua1kffb1g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20703ua1kffb1g » Version: N/A
Cypress » Cyw20703ua1kffb1gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20703ua1kffb1gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20703ua1kffb1gt » Version: N/A
Cypress » Cyw20704ua1kffb1g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20704ua1kffb1g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20704ua1kffb1g » Version: N/A
Cypress » Cyw20704ua1kffb1gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20704ua1kffb1gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20704ua1kffb1gt » Version: N/A
Cypress » Cyw20704ua2kffb1g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20704ua2kffb1g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20704ua2kffb1g » Version: N/A
Cypress » Cyw20704ua2kffb1gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20704ua2kffb1gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20704ua2kffb1gt » Version: N/A
Cypress » Cyw20705a1kwfbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20705a1kwfbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20705a1kwfbgt » Version: N/A
Cypress » Cyw20705b0kwfbg Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20705b0kwfbg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20705b0kwfbg » Version: N/A
Cypress » Cyw20705b0kwfbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20705b0kwfbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20705b0kwfbgt » Version: N/A
Cypress » Cyw20706ua1kffb1g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20706ua1kffb1g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20706ua1kffb1g » Version: N/A
Cypress » Cyw20706ua1kffb1gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20706ua1kffb1gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20706ua1kffb1gt » Version: N/A
Cypress » Cyw20706ua1kffb4g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20706ua1kffb4g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20706ua1kffb4g » Version: N/A
Cypress » Cyw20706ua2kffb4g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20706ua2kffb4g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20706ua2kffb4g » Version: N/A
Cypress » Cyw20706ua2kffb4gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20706ua2kffb4gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20706ua2kffb4gt » Version: N/A
Cypress » Cyw20707a2kubgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20707a2kubgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20707a2kubgt » Version: N/A
Cypress » Cyw20707ua1kffb1g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20707ua1kffb1g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20707ua1kffb1g » Version: N/A
Cypress » Cyw20707ua1kffb4g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20707ua1kffb4g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20707ua1kffb4g » Version: N/A
Cypress » Cyw20707ua1kffb4gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20707ua1kffb4gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20707ua1kffb4gt » Version: N/A
Cypress » Cyw20707ua2kffb4g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20707ua2kffb4g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20707ua2kffb4g » Version: N/A
Cypress » Cyw20707ua2kffb4gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20707ua2kffb4gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20707ua2kffb4gt » Version: N/A
Cypress » Cyw20707va1pkwbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20707va1pkwbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20707va1pkwbgt » Version: N/A
Cypress » Cyw20707va2pkwbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20707va2pkwbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20707va2pkwbgt » Version: N/A
Cypress » Cyw20730a1kfbg Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a1kfbg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a1kfbg » Version: N/A
Cypress » Cyw20730a1kfbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a1kfbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a1kfbgt » Version: N/A
Cypress » Cyw20730a1kml2g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a1kml2g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a1kml2g » Version: N/A
Cypress » Cyw20730a1kml2gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a1kml2gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a1kml2gt » Version: N/A
Cypress » Cyw20730a1kmlg Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a1kmlg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a1kmlg » Version: N/A
Cypress » Cyw20730a1kmlgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a1kmlgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a1kmlgt » Version: N/A
Cypress » Cyw20730a2kfbg Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a2kfbg_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a2kfbg » Version: N/A
Cypress » Cyw20730a2kfbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a2kfbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a2kfbgt » Version: N/A
Cypress » Cyw20730a2kml2g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a2kml2g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a2kml2g » Version: N/A
Cypress » Cyw20730a2kml2gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20730a2kml2gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20730a2kml2gt » Version: N/A
Cypress » Cyw20733a1kfb1gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a1kfb1gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a1kfb1gt » Version: N/A
Cypress » Cyw20733a2kfb1g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a2kfb1g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a2kfb1g » Version: N/A
Cypress » Cyw20733a2kfb1gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a2kfb1gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a2kfb1gt » Version: N/A
Cypress » Cyw20733a2kml1g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a2kml1g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a2kml1g » Version: N/A
Cypress » Cyw20733a2kml1gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a2kml1gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a2kml1gt » Version: N/A
Cypress » Cyw20733a3kfb1g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a3kfb1g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a3kfb1g » Version: N/A
Cypress » Cyw20733a3kfb1gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a3kfb1gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a3kfb1gt » Version: N/A
Cypress » Cyw20733a3kfb2gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a3kfb2gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a3kfb2gt » Version: N/A
Cypress » Cyw20733a3kml1g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a3kml1g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a3kml1g » Version: N/A
Cypress » Cyw20733a3kml1gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20733a3kml1gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20733a3kml1gt » Version: N/A
Cypress » Cyw20734ua1kffb3g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20734ua1kffb3g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20734ua1kffb3g » Version: N/A
Cypress » Cyw20734ua1kffb3gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20734ua1kffb3gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20734ua1kffb3gt » Version: N/A
Cypress » Cyw20734ua2kffb3g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20734ua2kffb3g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20734ua2kffb3g » Version: N/A
Cypress » Cyw20734ua2kffb3gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw20734ua2kffb3gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw20734ua2kffb3gt » Version: N/A
Cypress » Cyw43438kubgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw43438kubgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw43438kubgt » Version: N/A
Cypress » Cyw4343w1kubgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw4343w1kubgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw4343w1kubgt » Version: N/A
Cypress » Cyw4343wkubgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw4343wkubgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw4343wkubgt » Version: N/A
Cypress » Cyw4343wkwbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw4343wkwbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw4343wkwbgt » Version: N/A
Cypress » Cyw4354kkwbgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw4354kkwbgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw4354kkwbgt » Version: N/A
Cypress » Cyw4354xkubgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw4354xkubgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw4354xkubgt » Version: N/A
Cypress » Cyw89071a1cubxgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw89071a1cubxgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw89071a1cubxgt » Version: N/A
Cypress » Cyw89072brfb5g Firmware » Version: N/A
cpe:2.3:o:cypress:cyw89072brfb5g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw89072brfb5g » Version: N/A
Cypress » Cyw89072brfb5gt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw89072brfb5gt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw89072brfb5gt » Version: N/A
Cypress » Cyw89335l2cubgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw89335l2cubgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw89335l2cubgt » Version: N/A
Cypress » Cyw89335lcubgt Firmware » Version: N/A
cpe:2.3:o:cypress:cyw89335lcubgt_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cypress » Cyw89335lcubgt » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-19860

EPSS FAQ

0.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 53 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-19860

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.8	MEDIUM	AV:A/AC:L/Au:N/C:P/I:P/A:P	6.5	6.4	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-19860

CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-19860

https://source.android.com/security/bulletin/2019-05-01

Android Security Bulletin—May 2019 | Android Open Source Project
Third Party Advisory

CVEs referencing this url
http://seclists.org/fulldisclosure/2019/Jul/22

Full Disclosure: APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra

CVEs referencing this url
http://seclists.org/fulldisclosure/2019/Aug/11

Full Disclosure: APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra

CVEs referencing this url
https://www.broadcom.com/support/resources/product-security-center

Product Security Center
Vendor Advisory

CVEs referencing this url
https://support.apple.com/kb/HT210348

About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra - Apple Support

CVEs referencing this url
https://seclists.org/bugtraq/2019/Aug/21

Bugtraq: APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2018-19860

Products affected by CVE-2018-19860

Exploit prediction scoring system (EPSS) score for CVE-2018-19860

CVSS scores for CVE-2018-19860

CWE ids for CVE-2018-19860

References for CVE-2018-19860