CVE-2018-19860 Code injection in n/a
Attackers can execute arbitrary code on devices using vulnerable Broadcom WiFi firmware by sending malicious LMP commands.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-19860?
CVE-2018-19860 is a high-severity code injection vulnerability in n/a, published on 7 Jun 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.
Weakness: CWE-732
Which versions are affected by CVE-2018-19860?
It affects 63 products.
Products include Broadcom Bcm4335c0 Firmware, Broadcom Bcm43438a1 Firmware, Cypress Cyw20702a1kwfbg Firmware, Cypress Cyw20702a1kwfbgt Firmware, Cypress Cyw20702b0kwfbg Firmware, Cypress Cyw20702b0kwfbgt Firmware and 57 more.
How do I fix CVE-2018-19860?
No fix has been published for CVE-2018-19860 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2018-19860 being exploited?
There is no known exploitation of CVE-2018-19860 in the wild and no public exploit code.
Sources
Also known as GHSA-rjvg-wj8q-j8qg.