medium5.4
CVE-2022-46401
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.
Impact
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microchip | Bm78 Firmware | Version 1.43 |
| Microchip | Bm83 Firmware | Version 1.43 |
| Microchip | Rn4870 Firmware | Version 1.43 |
| Microchip | Rn4871 Firmware | Version 1.43 |
| Microchip | Bm70 Firmware | Version 1.43 |
| Microchip | Bm71 Firmware | Version 1.43 |
| Microchip | Pic Lightblue Explorer Demo Firmware | Version 4.2_dt100112 |
| Microchip | Pic32cx1012bz25048 Firmware | All versions |
| Microchip | Wbz451 Firmware | All versions |
| Microchip | Rn4678 Firmware | Version 1.43 |
| Microchip | Bm77 Firmware | Version 1.43 |
| Microchip | Bm64 Firmware | Version 1.43 |
Weakness classification
References
- NVD record
- CVE.org record
- https://microchip.com
- https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM
- https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG
- https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le
- https://microchip.com
- https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM
- https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG
- https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le