{"id":"CVE-2020-10370","aliases":["EUVD-2020-2825","GHSA-x8m2-f296-h7vh","UBUNTU-CVE-2020-10370","openSUSE-SU-2024:11689-1"],"status":"published","title":"Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth...","description":"Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a \"Spectra\" attack.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00565,"percentile":0.47227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-06-15T00:00:00Z","modified":"2026-10-20T10:51:35Z","fixes":[{"ecosystem":"openSUSE:Tumbleweed","package":"bcm43xx-firmware","fixed_in":["20180314-14.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-firmware-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20161020-0ubuntu1","1.20180919-0ubuntu0.18.04.2","1.20190215-0ubuntu0.18.04.1","1.20190819-0ubuntu0.18.04.1","1.20200601+arm64-0ubuntu2~18.04.1","4-0ubuntu0~18.04.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bcm43xx-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180314-14.1"}]}]}],"references":[{"url":"https://www.informatik.tu-darmstadt.de/seemoo/team_seemoo/jiska_classen/index.en.jsp","tags":["web"]},{"url":"https://github.com/RPi-Distro/bluez-firmware/commit/8445a53ce2c51a77472b908a0c8f6f8e1fa5c37a","tags":["fix"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-10370","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052676","tags":["report"]},{"url":"https://www.informatik.tu-darmstadt.de/fb20/aktuelles_fb20/fb20_neuigkeiten/neuigkeiten_fb20_details_203136.de.jsp","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10370"},{"url":"https://github.com/advisories/GHSA-x8m2-f296-h7vh"},{"url":"https://ubuntu.com/security/CVE-2020-10370","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10370","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10370","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-10370","description":"Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a \"Spectra\" attack.","status":"published","published":"2024-11-10T00:00:00Z","modified":"2025-01-27T17:54:31.193Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2020-2825","description":"Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a \"Spectra\" attack.","status":"published","published":"2024-11-10T00:00:00Z","modified":"2025-01-27T17:54:31Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:12.665174Z"}],"ghsa":[{"id":"GHSA-x8m2-f296-h7vh","title":"Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth...","description":"Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a \"Spectra\" attack.","status":"published","published":"2024-11-11T00:30:44Z","modified":"2025-01-27T18:33:08Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:59:41.697715Z"}],"nvd":[{"id":"CVE-2020-10370","description":"Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a \"Spectra\" attack.","status":"published","published":"2024-11-11T00:15:13.707Z","modified":"2026-06-17T02:47:39.49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:06:48.591569Z"}],"osv":[{"id":"CVE-2020-10370","description":"Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a \"Spectra\" attack.","status":"published","published":"2024-11-11T00:15:13.707Z","modified":"2026-10-20T10:51:35.094790668Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"UBUNTU-CVE-2020-10370","description":"Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a \"Spectra\" attack.","status":"published","published":"2024-11-11T00:15:00Z","modified":"2025-09-08T16:46:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"openSUSE-SU-2024:11689-1","title":"bcm43xx-firmware-20180314-14.1 on GA media","description":"These are all security issues fixed in the bcm43xx-firmware-20180314-14.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:16:15.749645Z","updated_at":"2026-11-02T16:58:35.195147Z"}]}}