← Back

CVE-2022-46401

nvd nist
Published: Dec 19, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Exploitability: 2.8 / Impact: 2.5
Source: NVD

Description

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.

Affected (12)

Microchip
12 products
Bm78 Firmware
Bm83 Firmware
Rn4870 Firmware
Rn4871 Firmware
Bm70 Firmware
Bm71 Firmware
Pic Lightblue Explorer Demo Firmware
Pic32cx1012bz25048 Firmware
Wbz451 Firmware
Rn4678 Firmware
Bm77 Firmware
Bm64 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bm78 Firmware
Version 1.43
Running on/withPlatform Versions
Microchip
Bm78
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bm83 Firmware
Version 1.43
Running on/withPlatform Versions
Microchip
Bm83
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rn4870 Firmware
Version 1.43
Running on/withPlatform Versions
Microchip
Rn4870
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rn4871 Firmware
Version 1.43
Running on/withPlatform Versions
Microchip
Rn4871
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bm70 Firmware
Version 1.43
Running on/withPlatform Versions
Microchip
Bm70
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bm71 Firmware
Version 1.43
Running on/withPlatform Versions
Microchip
Bm71
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Pic Lightblue Explorer Demo Firmware
Version 4.2_dt100112
Running on/withPlatform Versions
Microchip
Pic Lightblue Explorer Demo
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Pic32cx1012bz25048 Firmware
All versions
Running on/withPlatform Versions
Microchip
Pic32cx1012bz25048
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wbz451 Firmware
All versions
Running on/withPlatform Versions
Microchip
Wbz451
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rn4678 Firmware
Version 1.43
Running on/withPlatform Versions
Microchip
Rn4678
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bm77 Firmware
Version 1.43
Running on/withPlatform Versions
Microchip
Bm77
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bm64 Firmware
Version 1.43
Running on/withPlatform Versions
Microchip
Bm64
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

Source: cve@mitre.org
Product
Source: cve@mitre.org
ExploitTechnical DescriptionThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.