CVE-2020-10368

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow memory read access via a "Spectra" attack.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-922

Affected software

No affected versions have been published.

Timeline

Published: Nov 10, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2020

CVE-2020-103695.5Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow inferences about memory conte CVE-2020-10374.2A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b CVE-2020-103708.8Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bl CVE-2020-103725.4Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/d CVE-2020-103749.8A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted CVE-2020-103755.5An issue was discovered in New Media Smarty before 9.10. Passwords are stored in the database in an obfuscated format that can be easily rev CVE-2020-103769.8Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Bas CVE-2020-103779.8A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access CVE-2020-103785.5In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed CVE-2020-103797.8In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.CVE-2020-10385.5<p>A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfull CVE-2020-103809.8RMySQL through 0.10.19 allows SQL Injection.