CVE-2022-45190: Medium severity microchip rn4870 firmware vulnerability

Published Feb 7, 2023

Updated

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device.

Affected Software

4 affected components

Microchip Rn4870 Firmware=1.43

Microchip RN4870

All of the following

Microchip Rn4870 Firmware=1.43

Microchip RN4870

Event History

Feb 7, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Feb 8, 2023

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-45190?

CVE-2022-45190 is a vulnerability discovered in Microchip RN4870 1.43 devices that allows an attacker within BLE radio range to bypass passkey entry in the legacy pairing of the device.

How does CVE-2022-45190 affect Microchip RN4870 1.43 devices?

CVE-2022-45190 affects Microchip RN4870 1.43 devices by enabling an attacker within BLE radio range to bypass passkey entry in the legacy pairing process.

What is the severity of CVE-2022-45190?

CVE-2022-45190 has a severity rating of medium, with a CVSS score of 5.3.

How can I fix CVE-2022-45190 on my Microchip RN4870 1.43 device?

To fix CVE-2022-45190 on your Microchip RN4870 1.43 device, it is recommended to update the firmware to a version that addresses the vulnerability.

Is Microchip RN4870 version 1.43 vulnerable to CVE-2022-45190?

Yes, Microchip RN4870 version 1.43 is vulnerable to CVE-2022-45190.