cypress

Top products

The 14 most recently published vulnerabilities affecting cypress.

• CVE-2021-47744Cypress Solutions CTM-200/CTM-ONE 1.3.6 Hard-coded Credentials Remote Root7.5Dec 31, 2025
• CVE-2021-47745Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection via Firmware Upgrade8.8Dec 31, 2025
• CVE-2023-47415Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the cli_text parameter.7.5Mar 7, 2024
• CVE-2021-34147The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multip...6.5Sep 7, 2021
• CVE-2021-34148The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after comple...6.5Sep 7, 2021
• CVE-2021-34145The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with an invalid Baseband packet type (...5.3Sep 7, 2021
• CVE-2021-34146The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a de...6.5Sep 7, 2021
• CVE-2019-18614On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is because the maximum BLOC buffer size for sending and receiving data is set to 384...7.8Jun 16, 2020
• CVE-2020-11957The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number (Pairing Random) with significantly less entropy than the specified ...7.5Jun 9, 2020
• CVE-2019-13916An issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy (BLE) packet is received, it is copied into a Heap (ThreadX Block) buffe...8.8Apr 13, 2020
• CVE-2019-16336The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload...6.5Feb 12, 2020
• CVE-2019-17061The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a...6.5Feb 10, 2020
• CVE-2018-19860Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain ...8.8Jun 7, 2019
• CVE-2007-5922The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hos...5.0Nov 10, 2007