VulnerabilityModified
CVE-2022-46400
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing.
MEDIUM 5.4EPSS 0.62%
Does this matter?
Lower severity and a low EPSS score (0.62%). Track it; it rarely justifies an emergency change on its own.
Description
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing.
- CVSS 3.1
- 5.4 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- EPSS
- 0.62% probability · 48th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- microchip/bm78 firmware · microchip/bm83 firmware · microchip/rn4870 firmware · microchip/rn4871 firmware · microchip/bm70 firmware · microchip/bm71 firmware · microchip/pic lightblue explorer demo firmware · microchip/is1870 firmware · microchip/is1871 firmware
- Source
- cve@mitre.org
References
- https://microchip.comProduct
- https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYMExploit, Technical Description, Third Party Advisory
- https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExGThird Party Advisory
- https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-leVendor Advisory
- https://microchip.comProduct
- https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYMExploit, Technical Description, Third Party Advisory
- https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExGThird Party Advisory
- https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-leVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.