PT-2022-27850 · Microchip · Rn4870+1

Published 2022-12-19 · Updated 2023-08-08 · CVE-2022-46399

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microchip RN4870 module firmware version 1.43 Microchip PIC LightBlue Explorer Demo version 4.2 DT100112

Description The issue is related to the Microchip RN4870 module firmware and the Microchip PIC LightBlue Explorer Demo being unresponsive with ConReqTimeoutZero.

Recommendations For Microchip RN4870 module firmware version 1.43, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microchip PIC LightBlue Explorer Demo version 4.2 DT100112, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2022-46399

Affected Products

Pic Lightblue Explorer Demo

Rn4870

References · 9

• 🔥 https://computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM · Exploit
• https://osv.dev/vulnerability/CVE-2022-46399 · Vendor Advisory
• https://microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46399 · Security Note
• https://t.me/cvenotify/40214 · Telegram Post
• https://microchip.com · Note
• https://t.me/cibsecurity/54942 · Telegram Post
• https://computer.org/csdl/proceedings/sp/2023/1He7WWuJExG · Note
• https://t.me/cvenotify/40204 · Telegram Post