PT-2019-20103 · Broadcom · Bcm20702A1-Firmware

Publicado 2019-11-10 · Atualizado 2019-11-10

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions bcm20702a1-firmware (affected versions not specified)

Description The issue is related to person-in-the-middle attacks. To avoid such attacks, the update changes the protocol used to fetch the archive from http to https. Additionally, it fetches and installs another variant firmware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

OPENSUSE-SU-2019:2477-1

Produtos afetados

Bcm20702A1-Firmware

Referências · 4

• https://osv.dev/vulnerability/openSUSE-SU-2019:2477-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1154083 · Nota
• https://bugzilla.suse.com/1087996 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/D6UZOS3SGLCHEJRVMAIL5XZQV7GGFFQE/#D6UZOS3SGLCHEJRVMAIL5XZQV7GGFFQE · Nota