Lucene search

Pic Lightblue Explorer Demo Firmware Security Vulnerabilities

cve

CVE-2022-46399

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.

7.5CVSS

7.5AI Score

0.001EPSS

2022-12-19 11:15 PM

cve

CVE-2022-46400

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing.

5.4CVSS

5.5AI Score

0.001EPSS

2022-12-19 11:15 PM

cve

CVE-2022-46401

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.

5.4CVSS

5.5AI Score

0.001EPSS

2022-12-19 11:15 PM

cve

CVE-2022-46402

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values.

6.5CVSS

6.5AI Score

0.001EPSS

2022-12-19 11:15 PM

cve

CVE-2022-46403

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.

8.6CVSS

8.5AI Score

0.001EPSS

2022-12-19 11:15 PM