CVE-2022-45190

CVE-2022-45190 affects Microchip RN4870 devices (version 1.43). The issue allows an attacker within the BLE radio range to bypass the passkey entry in the legacy pairing process. The Red Hat, NVD, CNNVD, CVE authorities all describe the same vulnerability, with the attack surface centered on Blue...

CVE-2022-45191

CVE-2022-45191 affects Microchip RN4870 (v1.43). A denial-of-service can be triggered by an attacker within Bluetooth Low Energy range sending a pair-confirm message with wrong values, exploiting a flaw in the pairing confirmation handling. The impact is availability disruption (per CVSS: HIGH av...

PT-2023-14633

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43 Description An issue was discovered in the Microchip RN4870 device, where an attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device. Recommendations For Microchip RN4870 versi...

PT-2023-14635

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43 Description An issue was discovered that allows an attacker within BLE radio range to cause a denial of service by sending a cleartext encryption pause request. Recommendations For Microchip RN4870 version 1.43,...

CVE-2022-45192

The CVE-2022-45192 entry describes a vulnerability in Microchip RN4870, version 1.43, where an attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request. The available documents consistently name the RN4870 1.43 device and the cleartext encrypti...

PT-2023-14634

Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43 Description An issue was discovered that allows an attacker within BLE radio range to cause a denial of service by sending a pair confirm message with wrong values. Recommendations For Microchip RN4870 version 1.4...

CVE-2022-45191: Improper Validation of Integrity Check Value

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a pair confirm message with wrong values...

CVE-2022-45190: Missing Authentication for Critical Function

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device...

CVE-2022-45192: Undefined Security Weakness

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request...

iobroker.combustion-control (0.0.1), jcode-ble (0.0.1) +1 more potentially affected by CVE-2023-26109 via node-bluetooth-serial-port (2.2.7)

node-bluetooth-serial-port NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth-serial-port and may be impacted: - iobroker.combustion-control 0.0.1 - jcode-ble 0.0.1 - jcode-bluetooth =0.1.0, =0.9.2 Source cves:...

CVE-2023-23609

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol BLE-L2C...

Out-of-bounds

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol BLE-L2C...

CVE-2022-20461

In pinReplyNative of comandroidbluetoothbtserviceAdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege of BLE with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Type confusion

In pinReplyNative of comandroidbluetoothbtserviceAdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege of BLE with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-23609 contiki-ng BLE-L2CAP contains Improper size validation of L2CAP frames

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol BLE-L2C...

CVE-2023-23609

Contiki-NG up to and including version 4.8 is affected by an out-of-bounds write in the BLE-L2CAP module during reassembly of fragmented packets. The issue arises because the packet buffer is not checked for sufficient size, potentially allowing writes of up to 1152 bytes. The vulnerability is un...

CVE-2023-23609

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol BLE-L2C...

CVE-2023-23609 contiki-ng BLE-L2CAP contains Improper size validation of L2CAP frames

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol BLE-L2C...

CVE-2023-23609: Out-of-bounds Write

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol BLE-L2C...

CVE-2022-20461: Access of Resource Using Incompatible Type

In pinReplyNative of comandroidbluetoothbtserviceAdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege of BLE with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...