PT-2023-14633 · Microchip · Microchip Rn4870

Published 2023-02-07 · Updated 2025-03-25 · CVE-2022-45190

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43

Description An issue was discovered in the Microchip RN4870 device, where an attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device.

Recommendations For Microchip RN4870 version 1.43, consider disabling the legacy pairing feature until a patch is available to prevent exploitation. Restrict access to the device to minimize the risk of unauthorized access.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2022-45190

Affected Products

Microchip Rn4870

References · 7

• https://osv.dev/vulnerability/CVE-2022-45190 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45190 · Security Note
• https://t.me/cvenotify/44484 · Telegram Post
• https://t.me/cvenotify/43852 · Telegram Post
• https://blediff.github.io · Note
• https://t.me/cvenotify/116115 · Telegram Post
• https://t.me/cibsecurity/57726 · Telegram Post