Cypress Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined12
Forum Software1

Produkt

Cypress WICED BT Stack3
Cypress Bluetooth Mesh SDK2
Cypress PSoC 42
Cypress CTM-2001
Cypress CYW920735Q60EVB1

Przeciwdziałanie

Official Fix1
Temporary Fix0
Workaround0
Unavailable0
Not Defined12

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined13

Wektor dostępu

Not Defined0
Physical4
Local0
Adjacent7
Network2

Uwierzytelnianie

Not Defined0
High0
Low8
None5

Interakcja z użytkownikiem

Not Defined0
Required0
None13

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤40
≤50
≤62
≤74
≤83
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤34
≤40
≤50
≤63
≤73
≤83
≤90
≤100

VulDB

≤10
≤20
≤34
≤40
≤52
≤63
≤73
≤81
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤93
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤92
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k4
<2k6
<5k3
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k11
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (9): Bluetooth Mesh SDK (2), CTM-200 (1), CYW20735 Evaluation Board (1), CYW920735Q60EVB (1), PSoC 4 (2), PSoC Creator BLE (1), WICED BT Stack (3), WICED Studio (1), Wireless IoT (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-03-075.55.5Cypress CTM-200 privilege escalationNieznanyNot DefinedNot Defined0.000450.04CVE-2023-47415
2023-02-027.57.5Cypress Bluetooth Mesh SDK Segmented Packet lower_transport_layer_on_seg memory corruptionNieznanyNot DefinedNot Defined0.000660.00CVE-2022-31364
2023-02-026.86.8Cypress Bluetooth Mesh SDK pb_transport_handle_frag_ memory corruptionNieznanyNot DefinedNot Defined0.000660.04CVE-2022-31363
2021-09-072.12.1Cypress WICED BT Stack Bluetooth Classic BrakTooth denial of serviceNieznanyNot DefinedNot Defined0.000580.00CVE-2021-34148
2021-09-072.12.1Cypress CYW920735Q60EVB Bluetooth Classic BrakTooth denial of serviceNieznanyNot DefinedNot Defined0.000580.00CVE-2021-34146
2021-09-072.12.1Cypress WICED BT Stack Bluetooth Classic BrakTooth denial of serviceNieznanyNot DefinedNot Defined0.000580.00CVE-2021-34145
2021-09-072.12.1Cypress WICED BT Stack Bluetooth Classic BrakTooth denial of serviceNieznanyNot DefinedNot Defined0.000580.00CVE-2021-34147
2020-06-167.07.0Cypress CYW20735 Evaluation Board memory corruptionForum SoftwareNot DefinedNot Defined0.000420.00CVE-2019-18614
2020-06-096.26.0Cypress PSoC Creator BLE Pairing PRNG weak encryptionNieznanyNot DefinedOfficial Fix0.000540.00CVE-2020-11957
2020-04-137.57.5Cypress WICED Studio Bluetooth Low Energy dhmulp_getRxBuffer memory corruptionNieznanyNot DefinedNot Defined0.001250.03CVE-2019-13916

3 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 3 results.

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!