CVE-2020-10370

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a "Spectra" attack.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Nov 11, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2020

CVE-2020-103725.4Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/d CVE-2020-103749.8A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted CVE-2020-103755.5An issue was discovered in New Media Smarty before 9.10. Passwords are stored in the database in an obfuscated format that can be easily rev CVE-2020-103769.8Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Bas CVE-2020-103779.8A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access CVE-2020-103785.5In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed CVE-2020-103797.8In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.CVE-2020-10385.5<p>A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfull CVE-2020-103809.8RMySQL through 0.10.19 allows SQL Injection.CVE-2020-103815.3An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthentic CVE-2020-103828.8An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticat CVE-2020-103839.8An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthentic