Back to Database
Status published
High
CVE-2018-19860
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11,...
Vulnerability Description
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-19860
Credits & Attribution
No credits recorded in the NVD database.
References
More from broadcom
View All →CVE-2022-37049
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain...
High
7.8
CVE-2022-37048
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain...
High
7.8
CVE-2022-37047
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain...
High
7.8
CVE-2022-28487
Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums()...
High
7.5
CVE-2022-27942
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in...
High
7.8
Affected Vendor
broadcom
View all reports →Affected Software
bcm4335c0 firmware, bcm43438a1 firmware, cyw20702a1kwfbg firmware, cyw20702a1kwfbgt firmware, cyw20702b0kwfbg firmware, cyw20702b0kwfbgt firmware, cyw20703ua1kffb1g firmware, cyw20703ua1kffb1gt firmware, cyw20704ua1kffb1g firmware, cyw20704ua1kffb1gt firmware, cyw20704ua2kffb1g firmware, cyw20704ua2kffb1gt firmware, cyw20705a1kwfbgt firmware, cyw20705b0kwfbg firmware, cyw20705b0kwfbgt firmware, cyw20706ua1kffb1g firmware, cyw20706ua1kffb1gt firmware, cyw20706ua1kffb4g firmware, cyw20706ua2kffb4g firmware, cyw20706ua2kffb4gt firmware, cyw20707a2kubgt firmware, cyw20707ua1kffb1g firmware, cyw20707ua1kffb4g firmware, cyw20707ua1kffb4gt firmware, cyw20707ua2kffb4g firmware, cyw20707ua2kffb4gt firmware, cyw20707va1pkwbgt firmware, cyw20707va2pkwbgt firmware, cyw20730a1kfbg firmware, cyw20730a1kfbgt firmware, cyw20730a1kml2g firmware, cyw20730a1kml2gt firmware, cyw20730a1kmlg firmware, cyw20730a1kmlgt firmware, cyw20730a2kfbg firmware, cyw20730a2kfbgt firmware, cyw20730a2kml2g firmware, cyw20730a2kml2gt firmware, cyw20733a1kfb1gt firmware, cyw20733a2kfb1g firmware, cyw20733a2kfb1gt firmware, cyw20733a2kml1g firmware, cyw20733a2kml1gt firmware, cyw20733a3kfb1g firmware, cyw20733a3kfb1gt firmware, cyw20733a3kfb2gt firmware, cyw20733a3kml1g firmware, cyw20733a3kml1gt firmware, cyw20734ua1kffb3g firmware, cyw20734ua1kffb3gt firmware, cyw20734ua2kffb3g firmware, cyw20734ua2kffb3gt firmware, cyw43438kubgt firmware, cyw4343w1kubgt firmware, cyw4343wkubgt firmware, cyw4343wkwbgt firmware, cyw4354kkwbgt firmware, cyw4354xkubgt firmware, cyw89071a1cubxgt firmware, cyw89072brfb5g firmware, cyw89072brfb5gt firmware, cyw89335l2cubgt firmware, cyw89335lcubgt firmware
Vulnerable Versions:
2012-12-11, 2014-06-02
Timeline
Official Publish:
June 7th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.