PT-2023-14633 · Microchip · Microchip Rn4870

Publicado 2023-02-07 · Atualizado 2025-03-25 · CVE-2022-45190

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43

Description An issue was discovered in the Microchip RN4870 device, where an attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device.

Recommendations For Microchip RN4870 version 1.43, consider disabling the legacy pairing feature until a patch is available to prevent exploitation. Restrict access to the device to minimize the risk of unauthorized access.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2022-45190

Produtos afetados

Microchip Rn4870

Referências · 7

• https://t.me/cvenotify/44484 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-45190 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-45190 · Nota de Segurança
• https://t.me/cvenotify/43852 · Publicação no Telegram
• https://blediff.github.io · Nota
• https://t.me/cvenotify/116115 · Publicação no Telegram
• https://t.me/cibsecurity/57726 · Publicação no Telegram