Cypress
14 CVEs across 141 Cypress products. Browse Cypress vulnerabilities, severities, and proof-of-concept exploits.
Cypress products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-47745 | High | 8.8 | 2025-12-31 | Cypress Solutions CTM-200 2.7.1 contains an authenticated command injection vulnerability in the firmware upgrade script that allows remote attackers to execut… |
CVE-2021-47744 | High | 7.5 | 2025-12-31 | Cypress Solutions CTM-200/CTM-ONE 1.3.6 contains hard-coded credentials vulnerability in Linux distribution that exposes root access. Attackers can exploit the… |
CVE-2023-47415 | High | 7.5 | 2024-03-07 | Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the cli_text parameter. |
CVE-2021-34148 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot… |
CVE-2021-34147 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timin… |
CVE-2021-34146 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing at… |
CVE-2021-34145 | Medium | 5.3 | 2021-09-07 | The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot… |
CVE-2019-18614 | High | 7.8 | 2020-06-16 | On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is because the maximum BLOC buffer size for se… |
CVE-2020-11957 | High | 7.5 | 2020-06-09 | The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number (Pairing Random) with signific… |
CVE-2019-13916 | High | 8.8 | 2020-04-13 | An issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy (BLE) packet is received, it is co… |
CVE-2019-16336 | Medium | 6.5 | 2020-02-12 | The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the co… |
CVE-2019-17061 | Medium | 6.5 | 2020-02-10 | The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer header and executes ce… |
CVE-2018-19860 | High | 8.8 | 2019-06-07 | Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly rest… |
CVE-2007-5922 | | 2007-11-10 | The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor t… |