Ti CC2640R2 Software Development Kit vulnerabilities

2 CVEs affecting Ti CC2640R2 Software Development Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19193, published 2020-02-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-17520, published 2020-02-10. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key packet on reception, allowing attackers in radio…
CVE-2019-19193, published 2020-02-10. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does…