CVE-2022-45192

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request...

Cross site request forgery (csrf)

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request...

Design/Logic Flaw

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device...

Design/Logic Flaw

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a pair confirm message with wrong values...

CVE-2022-45191

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a pair confirm message with wrong values...

PT-2023-14634

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43 Description An issue was discovered that allows an attacker within BLE radio range to cause a denial of service by sending a pair confirm message with wrong values. Recommendations For Microchip RN4870 version 1.4...

PT-2023-14633

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43 Description An issue was discovered in the Microchip RN4870 device, where an attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device. Recommendations For Microchip RN4870 versi...

CVE-2022-45192

The CVE-2022-45192 entry describes a vulnerability in Microchip RN4870, version 1.43, where an attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request. The available documents consistently name the RN4870 1.43 device and the cleartext encrypti...

CVE-2022-45192

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request...

CVE-2022-45191: Improper Validation of Integrity Check Value

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a pair confirm message with wrong values...

CVE-2022-45190

CVE-2022-45190 affects Microchip RN4870 devices (version 1.43). The issue allows an attacker within the BLE radio range to bypass the passkey entry in the legacy pairing process. The Red Hat, NVD, CNNVD, CVE authorities all describe the same vulnerability, with the attack surface centered on Blue...

CVE-2022-45191

CVE-2022-45191 affects Microchip RN4870 (v1.43). A denial-of-service can be triggered by an attacker within Bluetooth Low Energy range sending a pair-confirm message with wrong values, exploiting a flaw in the pairing confirmation handling. The impact is availability disruption (per CVSS: HIGH av...

CVE-2022-45190

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device...

PT-2023-14635

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43 Description An issue was discovered that allows an attacker within BLE radio range to cause a denial of service by sending a cleartext encryption pause request. Recommendations For Microchip RN4870 version 1.43,...

CVE-2022-45191

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a pair confirm message with wrong values...

CVE-2022-45192: Undefined Security Weakness

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request...

CVE-2022-45190: Missing Authentication for Critical Function

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device...

iobroker.combustion-control (0.0.1), jcode-ble (0.0.1) +1 more potentially affected by CVE-2023-26109 via node-bluetooth-serial-port (2.2.7)

node-bluetooth-serial-port NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth-serial-port and may be impacted: - iobroker.combustion-control 0.0.1 - jcode-ble 0.0.1 - jcode-bluetooth =0.1.0, =0.9.2 Source cves:...

CVE-2023-23609

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol BLE-L2C...

Out-of-bounds

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol BLE-L2C...