01 Record

CVE-2018-19860

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 1.02% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 60.9% of scored records. A rank, not a probability.
NVD base score: 8.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2019-06-07 16:23Z7 YR AGO

Last updated

2024-08-05 11:44Z2 YR AGO

Reserved

2018-12-05

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-732Incorrect Permission Assignment for Critical ResourceClass

Data version

5.1

Document digest

18b71aa46f800deffdbadd35c00a51d38fb77389b2bc8507fb9cc56d6ff24464

05 Affected products

VendorProductVersionsPlatforms

broadcombcm4335c0Not specified—

broadcombcm4335c0_firmwareNot specified—

broadcombcm43438a1Not specified—

broadcombcm43438a1_firmwareNot specified—

cypresscyw20702a1kwfbgNot specified—

cypresscyw20702a1kwfbg_firmwareNot specified—

cypresscyw20702a1kwfbgtNot specified—

cypresscyw20702a1kwfbgt_firmwareNot specified—

cypresscyw20702b0kwfbgNot specified—

cypresscyw20702b0kwfbg_firmwareNot specified—

cypresscyw20702b0kwfbgtNot specified—

cypresscyw20702b0kwfbgt_firmwareNot specified—

cypresscyw20703ua1kffb1gNot specified—

cypresscyw20703ua1kffb1g_firmwareNot specified—

cypresscyw20703ua1kffb1gtNot specified—

cypresscyw20703ua1kffb1gt_firmwareNot specified—

cypresscyw20704ua1kffb1gNot specified—

cypresscyw20704ua1kffb1g_firmwareNot specified—

cypresscyw20704ua1kffb1gtNot specified—

cypresscyw20704ua1kffb1gt_firmwareNot specified—

cypresscyw20704ua2kffb1gNot specified—

cypresscyw20704ua2kffb1g_firmwareNot specified—

cypresscyw20704ua2kffb1gtNot specified—

cypresscyw20704ua2kffb1gt_firmwareNot specified—

cypresscyw20705a1kwfbgtNot specified—

cypresscyw20705a1kwfbgt_firmwareNot specified—

cypresscyw20705b0kwfbgNot specified—

cypresscyw20705b0kwfbg_firmwareNot specified—

cypresscyw20705b0kwfbgtNot specified—

cypresscyw20705b0kwfbgt_firmwareNot specified—

cypresscyw20706ua1kffb1gNot specified—

cypresscyw20706ua1kffb1g_firmwareNot specified—

cypresscyw20706ua1kffb1gtNot specified—

cypresscyw20706ua1kffb1gt_firmwareNot specified—

cypresscyw20706ua1kffb4gNot specified—

cypresscyw20706ua1kffb4g_firmwareNot specified—

cypresscyw20706ua2kffb4gNot specified—

cypresscyw20706ua2kffb4g_firmwareNot specified—

cypresscyw20706ua2kffb4gtNot specified—

cypresscyw20706ua2kffb4gt_firmwareNot specified—

cypresscyw20707a2kubgtNot specified—

cypresscyw20707a2kubgt_firmwareNot specified—

cypresscyw20707ua1kffb1gNot specified—

cypresscyw20707ua1kffb1g_firmwareNot specified—

cypresscyw20707ua1kffb4gNot specified—

cypresscyw20707ua1kffb4g_firmwareNot specified—

cypresscyw20707ua1kffb4gtNot specified—

cypresscyw20707ua1kffb4gt_firmwareNot specified—

cypresscyw20707ua2kffb4gNot specified—

cypresscyw20707ua2kffb4g_firmwareNot specified—

cypresscyw20707ua2kffb4gtNot specified—

cypresscyw20707ua2kffb4gt_firmwareNot specified—

cypresscyw20707va1pkwbgtNot specified—

cypresscyw20707va1pkwbgt_firmwareNot specified—

cypresscyw20707va2pkwbgtNot specified—

cypresscyw20707va2pkwbgt_firmwareNot specified—

cypresscyw20730a1kfbgNot specified—

cypresscyw20730a1kfbg_firmwareNot specified—

cypresscyw20730a1kfbgtNot specified—

cypresscyw20730a1kfbgt_firmwareNot specified—

66 further entries not shown. The complete list is in the raw JSON document.

06 References

www.broadcom.comhttps://www.broadcom.com/support/resources/product-security-centerx_refsource_MISC
source.android.comhttps://source.android.com/security/bulletin/2019-05-01x_refsource_CONFIRM
support.apple.comhttps://support.apple.com/kb/HT210348x_refsource_CONFIRM
seclists.org20190723 APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierrahttp://seclists.org/fulldisclosure/2019/Jul/22mailing-listx_refsource_FULLDISC
seclists.org20190814 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierrahttps://seclists.org/bugtraq/2019/Aug/21mailing-listx_refsource_BUGTRAQ
seclists.org20190816 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierrahttp://seclists.org/fulldisclosure/2019/Aug/11mailing-listx_refsource_FULLDISC

01 Record index

CVE-2018-19860

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2018-19860

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References