PatchTheCVEcypress vulnerabilities
Recent CVEs affecting cypress products. 12 tracked.
cypress has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2024-03-07. Highest priority: CVE-2023-47415 (score 60/100).
- CVE-2023-47415 HIGH 7.5 UPGRADE Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerabilit
- CVE-2021-34148 MEDIUM 6.5 UPGRADE The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does n
- CVE-2021-34147 MEDIUM 6.5 UPGRADE The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not prope
- CVE-2021-34146 MEDIUM 6.5 MITIGATE MITIGATE The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of
- CVE-2021-34145 MEDIUM 5.3 UPGRADE The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does n
- CVE-2020-11957 HIGH 7.5 UPGRADE The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generat
- CVE-2019-18614 HIGH 7.8 MITIGATE On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow
- CVE-2019-17061 MEDIUM 6.5 UPGRADE The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly r
- CVE-2019-16336 MEDIUM 6.5 UPGRADE UPGRADE The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channe
- CVE-2019-13916 HIGH 8.8 DOWNGRADE An issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and CYW20819A1
- CVE-2018-19860 HIGH 8.8 MITIGATE MITIGATE Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, an
- CVE-2007-5922 MEDIUM 5.0 MITIGATE DOWNGRADE The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2
FAQ
How do I fix cypress vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cypress being exploited right now?
None of the tracked cypress CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cypress CVE should I patch first?
CVE-2023-47415 currently ranks highest (60/100): Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerabilit.