PT-2019-9936 · Broadcom · Broadcom Firmware

Daniele Antonioli + 2 · Published 2019-06-07 · Updated 2020-08-24 · CVE-2018-19860

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Broadcom firmware versions prior to summer 2014

Description The issue is related to the improper restriction of LMP commands in Broadcom firmware, which can lead to the execution of certain memory contents upon receiving an LMP command. This can be demonstrated by executing an HCI command. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Broadcom firmware versions prior to summer 2014, consider disabling the execution of LMP commands as a temporary workaround until a patch is available. Restrict access to the vulnerable firmware to minimize the risk of exploitation. Avoid using the LMP command in the affected devices until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-19860

Affected Products

Broadcom Firmware

References · 9

• https://osv.dev/vulnerability/CVE-2018-19860 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19860 · Security Note
• https://broadcom.com/support/resources/product-security-center · Vendor Advisory
• https://source.android.com/security/bulletin/2019-05-01 · Note
• https://t.me/cibsecurity/4766 · Telegram Post
• https://seclists.org/bugtraq/2019/Aug/21 · Note
• https://support.apple.com/kb/HT210348 · Note
• http://seclists.org/fulldisclosure/2019/Jul/22 · Note
• http://seclists.org/fulldisclosure/2019/Aug/11 · Note