Vulnerabilities > Microchip > Bm78 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-12-19 CVE-2022-46400 Unspecified vulnerability in Microchip products
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing.
low complexity
microchip
5.4
2022-12-19 CVE-2022-46401 Unspecified vulnerability in Microchip products
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.
low complexity
microchip
5.4
2022-12-19 CVE-2022-46402 Improper Validation of Integrity Check Value vulnerability in Microchip products
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values.
low complexity
microchip CWE-354
6.5