CVE-2022-46399

Published: Dec 19, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.

Affected (14)

Products: Microchip: Bm78 Firmware, Bm83 Firmware, Rn4870 Firmware, Rn4871 Firmware, Bm70 Firmware, Bm71 Firmware, Pic Lightblue Explorer Demo Firmware, Bm64 Firmware, Bm77 Firmware, Is1870 Firmware, Is1871 Firmware, Rn4678 Firmware, Pic32cx1012bz25048 Firmware, Wbz451 Firmware

14 products

Pic Lightblue Explorer Demo Firmware

Pic32cx1012bz25048 Firmware

Wbz451 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Bm78 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Bm78	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Bm83 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Bm83	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Rn4870 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Rn4870	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Rn4871 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Rn4871	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Bm70 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Bm70	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Bm71 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Bm71	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Pic Lightblue Explorer Demo Firmware	Version 4.2_dt100112

Running on/with	Platform Versions
Microchip Pic Lightblue Explorer Demo	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Bm64 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Bm64	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Bm77 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Bm77	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Is1870 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Is1870	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Is1871 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Is1871	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Rn4678 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Rn4678	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Pic32cx1012bz25048 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Pic32cx1012bz25048	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microchip Wbz451 Firmware	Version 1.43

Running on/with	Platform Versions
Microchip Wbz451	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (8)

https://microchip.com

Source: cve@mitre.org

Product

https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM

Source: cve@mitre.org

ExploitTechnical DescriptionThird Party Advisory

https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG

Source: cve@mitre.org

Third Party Advisory

https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le

Source: cve@mitre.org

Vendor Advisory

https://microchip.com

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitTechnical DescriptionThird Party Advisory

https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.