medium5.4
CVE-2022-46400
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairi…
Impact
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microchip | Bm78 Firmware | Version 1.43 |
| Microchip | Bm83 Firmware | Version 1.43 |
| Microchip | Rn4870 Firmware | Version 1.43 |
| Microchip | Rn4871 Firmware | Version 1.43 |
| Microchip | Bm70 Firmware | Version 1.43 |
| Microchip | Bm71 Firmware | Version 1.43 |
| Microchip | Pic Lightblue Explorer Demo Firmware | Version 4.2_dt100112 |
| Microchip | Is1870 Firmware | Version 1.43 |
| Microchip | Is1871 Firmware | Version 1.43 |
Weakness classification
References
- NVD record
- CVE.org record
- https://microchip.com
- https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM
- https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG
- https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le
- https://microchip.com
- https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM
- https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG
- https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le