Vulnerabilities > CVE-2022-46401 - Unspecified vulnerability in Microchip products

CVSS 5.4 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

LOW

low complexity

microchip

NVD

Published: 2022-12-19

Updated: 2022-12-27

Summary

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.

Vulnerable Configurations

Part	Description	Count
OS	Microchip Microchip Bm78 Firmware 1.43 Microchip Bm83 Firmware 1.43 Microchip Rn4870 Firmware 1.43 Microchip Rn4871 Firmware 1.43 Microchip Bm70 Firmware 1.43 Microchip Bm71 Firmware 1.43 Microchip PIC Lightblue Explorer Demo Firmware 4.2_Dt100112 Microchip Pic32Cx1012Bz25048 Firmware - Microchip Wbz451 Firmware - Microchip Rn4678 Firmware 1.43 Microchip Bm77 Firmware 1.43 Microchip Bm64 Firmware 1.43	12
Hardware	Microchip Microchip Bm78 - Microchip Bm83 - Microchip Rn4870 - Microchip Rn4871 - Microchip Bm70 - Microchip Bm71 - Microchip PIC Lightblue Explorer Demo - Microchip Pic32Cx1012Bz25048 - Microchip Wbz451 - Microchip Rn4678 - Microchip Bm77 - Microchip Bm64 -	12

Summary

Vulnerable Configurations

References