PT-2023-14635 · Microchip · Rn4870

Published 2023-02-07 · Updated 2025-03-25 · CVE-2022-45192

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43

Description An issue was discovered that allows an attacker within BLE radio range to cause a denial of service by sending a cleartext encryption pause request.

Recommendations For Microchip RN4870 version 1.43, consider implementing measures to restrict or regulate incoming BLE requests to prevent denial of service attacks, such as filtering out cleartext encryption pause requests. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-45192

Affected Products

Rn4870

References · 6

• https://osv.dev/vulnerability/CVE-2022-45192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45192 · Security Note
• https://t.me/cibsecurity/57732 · Telegram Post
• https://t.me/cvenotify/116116 · Telegram Post
• https://blediff.github.io · Note
• https://t.me/cvenotify/43850 · Telegram Post