CVEs (8)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request. |
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a pair confirm message with wrong values. |
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device. |
1Microchip 9Bm70 Firmware Bm71 FirmwareBm78 Firmware+6 moreJun 17, 2026 Dec 19, 2022 N/A· v4 8.6 HIGH· v3 N/A· v2 The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages. |
1Microchip 9Bm70 Firmware Bm71 FirmwareBm78 Firmware+6 moreJun 17, 2026 Dec 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values. |
1Microchip 12Bm64 Firmware Bm70 FirmwareBm71 Firmware+9 moreJun 17, 2026 Dec 19, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete. |
1Microchip 9Bm70 Firmware Bm71 FirmwareBm78 Firmware+6 moreJun 17, 2026 Dec 19, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing. |
1Microchip 14Bm64 Firmware Bm70 FirmwareBm71 Firmware+11 moreJun 17, 2026 Dec 19, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero. |