PT-2024-10762
CVE-2020-10369
·
Published
2024-11-10
·
Updated
2024-11-26
Description by
CVSS 3.1
5.5
MediumMetricsAV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Cypress (and Broadcom) Wireless Combo chips versions prior to the January 2021 firmware update
Description
The issue allows inferences about memory content via a "Spectra" attack when a January 2021 firmware update is not present. This affects certain Cypress (and Broadcom) Wireless Combo chips.
Recommendations
For Cypress (and Broadcom) Wireless Combo chips versions prior to the January 2021 firmware update, apply the January 2021 firmware update to mitigate the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾