What’s Vulnerable › Vulnerabilities

CVE-2022-46402

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-12-19 · updated 2026-06-17
• Weakness: CWE-354

Description

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values.

Affected products

• Microchip Bm70 Firmware: 1.43
• Microchip Bm71 Firmware: 1.43
• Microchip Bm78 Firmware: 1.43
• Microchip Bm83 Firmware: 1.43
• Microchip Is1870 Firmware: 1.43
• Microchip Is1871 Firmware: 1.43
• Microchip Pic Lightblue Explorer Demo Firmware: 4.2_dt100112
• Microchip Rn4870 Firmware: 1.43
• Microchip Rn4871 Firmware: 1.43

References

• https://microchip.com
• https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM
• https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG
• https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le
• https://microchip.com
• https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM
• https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG
• https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le

Get alerted when CVE-2022-46402 or the next vulnerability affects your stack