Broadcom BCM4355C0 Firmware vulnerabilities

3 CVEs affecting Broadcom BCM4355C0 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-11122, published 2017-10-04.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-11120, published 2017-09-28. Critical severity, CVSS 9.8. EPSS: 9.1% chance of exploitation in the next 30 days. On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka…
• CVE-2017-11121, published 2017-09-28. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack…
• CVE-2017-11122, published 2017-10-04. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to ICMPv6 router advertisement offloading.