Broadcom Widcomm Bluetooth vulnerabilities

3 CVEs affecting Broadcom Widcomm Bluetooth, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-6908, published 2006-12-31.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-6908, published 2006-12-31. High severity, CVSS 10.0. EPSS: 30.7% chance of exploitation in the next 30 days. Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows,…
• CVE-2006-6898, published 2006-12-31. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. Widcomm Bluetooth for Windows (BTW) before 4.0.1.1500 allows remote attackers to listen to and record conversations, aka the CarWhisperer attack.
• CVE-2006-6905, published 2006-12-31. High severity, CVSS 10.0. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Widcomm Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors.