Medium severity4.3NVD Advisory· Published Oct 16, 2024· Updated Apr 15, 2026

CVE-2024-29155

Description

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.

Affected products

Microchip/RN4870llm-create

Patches

Vulnerability mechanics

References

ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zipnvd
www.microchip.com/en-us/product/rn4870nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000