Lucene search

[email protected]NVD:CVE-2022-46403

HistoryDec 19, 2022 - 11:15 p.m.

CVE-2022-46403

2022-12-1923:15:11

[email protected]

web.nvd.nist.gov

microchip

rn4870

firmware

reject messages

mishandles

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

41.8%

JSON

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.

Affected configurations

NVD

Node

microchipbm78_firmwareMatch1.43

AND

microchipbm78Match-

Node

microchipbm83_firmwareMatch1.43

AND

microchipbm83Match-

Node

microchiprn4870_firmwareMatch1.43

AND

microchiprn4870Match-

Node

microchiprn4871_firmwareMatch1.43

AND

microchiprn4871Match-

Node

microchipbm70_firmwareMatch1.43

AND

microchipbm70Match-

Node

microchipbm71_firmwareMatch1.43

AND

microchipbm71Match-

Node

microchippic_lightblue_explorer_demo_firmwareMatch4.2_dt100112

AND

microchippic_lightblue_explorer_demoMatch-

Node

microchipis1871_firmwareMatch1.43

AND

microchipis1871Match-

Node

microchipis1870_firmwareMatch1.43

AND

microchipis1870Match-

References

microchip.com

www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM

www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG

www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

41.8%

JSON

Related for NVD:CVE-2022-46403

cvelist1 prion1 cve1