← Database

CVE-2022-46401

MEDIUM CVSS: 5.4 Published: 2022-12-19 Modified: 2026-06-17

Description

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.

Affected Platforms

Microchip Bm71Microchip Bm83Microchip Rn4871Microchip Wbz451Microchip Bm83 FirmwareMicrochip Bm78Microchip Rn4678 FirmwareMicrochip Rn4871 FirmwareMicrochip Bm77Microchip Pic32Cx1012Bz25048

Weakness Type

NVD-CWE-noinfo, CWE-20

References