Cypress Wireless Combo Chips Vulnerable to Spectra Attack

CVE-2020-10369

What is CVE-2020-10369?

Certain wireless combo chips from Cypress and Broadcom have a vulnerability that enables attackers to infer the content stored in memory under specific conditions. This vulnerability arises when devices, lacking a crucial firmware update from January 2021, are exposed to a Spectra type of attack. Such conditions could allow a malicious actor to exploit the vulnerability to gain insights into sensitive information, compromising device integrity and user privacy. This highlights the importance of applying firmware updates promptly to mitigate potential security risks associated with memory content inference.

References