Lucene search
HistoryFeb 08, 2023 - 12:15 a.m.
CVE-2022-45190
microchip
rn4870
ble
passkey bypass
security vulnerability
cve-2022-45190
5.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device.
Affected configurations
Node
microchiprn4870Match-
microchiprn4870_firmwareMatch1.43
| CPE | Name | Operator | Version |
|---|---|---|---|
| microchip:rn4870_firmware | microchip rn4870 firmware | eq | 1.43 |
References
Related
cvelist
cvelist
CVE-2022-45190
2023-02-07 00:00:00
nvd
nvd
CVE-2022-45190
2023-02-08 00:15:08
prion
prion
Design/Logic Flaw
2023-02-08 00:15:00
5.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
Related for CVE-2022-45190