CVE-2022-46401
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.
- Score
- CVSS 3.1 5.4 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2022-12-19
- Last modified
- 2025-04-17
- Weaknesses
- CWE-20
Affected products
- Bm64 Firmware (Microchip)
- Bm70 Firmware (Microchip)
- Bm71 Firmware (Microchip)
- Bm77 Firmware (Microchip)
- Bm78 Firmware (Microchip)
- Bm83 Firmware (Microchip)
- Pic32cx1012bz25048 Firmware (Microchip)
- Pic Lightblue Explorer Demo Firmware (Microchip)
- Rn4678 Firmware (Microchip)
- Rn4870 Firmware (Microchip)
- Rn4871 Firmware (Microchip)
- Wbz451 Firmware (Microchip)
References
- https://microchip.com
- https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM
- https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG
- https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-b…
