CVE-2022-46399

The CVE-2022-46399 issue affects Microchip RN4870 module firmware version 1.43 and the Microchip PIC LightBlue Explorer Demo version 4.2 DT100112, described as an unresponsive state caused by ConReqTimeoutZero. The vulnerability is documented with a CVSS v3.1 base score of 7.5 (HIGH) and an adjac...

CVE-2022-46401

The CVE-2022-46401 affects Microchip RN4870 module firmware v1.43 and the Microchip PIC LightBlue Explorer Demo v4.2 DT100112, where PauseEncReqPlainText is accepted before pairing is complete. This can place the low-power Bluetooth stack in a faulty state, discarding other messages and causing s...