CVE-2020-10369

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Certain Cypress (and Broadcom) Wireless Combo chips, when a January 2021 firmware update is not present, allow inferences about memory content via a "Spectra" attack.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-203

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Nov 10, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-10374.2A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-bCVE-2020-103708.8Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a BlCVE-2020-103725.4Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/dCVE-2020-103749.8A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a craftedCVE-2020-103755.5An issue was discovered in New Media Smarty before 9.10. Passwords are stored in the database in an obfuscated format that can be easily revCVE-2020-103769.8Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: BasCVE-2020-103779.8A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain accessCVE-2020-103785.5In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed CVE-2020-103797.8In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.CVE-2020-10385.5<p>A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfullCVE-2020-103809.8RMySQL through 0.10.19 allows SQL Injection.CVE-2020-103815.3An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthentic
CVE-2020-10369: Medium severity, CVSS 5.5 | Vulnix