PT-2023-14635 · Microchip · Rn4870

Publicado 2023-02-07 · Atualizado 2025-03-25 · CVE-2022-45192

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43

Description An issue was discovered that allows an attacker within BLE radio range to cause a denial of service by sending a cleartext encryption pause request.

Recommendations For Microchip RN4870 version 1.43, consider implementing measures to restrict or regulate incoming BLE requests to prevent denial of service attacks, such as filtering out cleartext encryption pause requests. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2022-45192

Produtos afetados

Rn4870

Referências · 6

• https://osv.dev/vulnerability/CVE-2022-45192 · Aviso do Fabricante
• https://t.me/cibsecurity/57732 · Publicação no Telegram
• https://t.me/cvenotify/116116 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-45192 · Nota de Segurança
• https://blediff.github.io · Nota
• https://t.me/cvenotify/43850 · Publicação no Telegram