Unrated severityNVD Advisory· Published Dec 19, 2022· Updated Apr 17, 2025

CVE-2022-46401

Description

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.

Affected products

Microchip/RN4870 module firmwaredescription
Microchip/PIC LightBlue Explorer Demollm-fuzzy
Range: =4.2 DT100112
Microchip/RN4870 modulellm-fuzzy
Range: =1.43

Patches

Vulnerability mechanics

References

microchip.commitre
www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYMmitre
www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExGmitre
www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-lemitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000