CVE-2022-46402: Medium severity microchip bm78 firmware vulnerability
Published Dec 19, 2022
·Updated
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairConrmSend with incorrect values.
Affected Software
36 affected components
Microchip Bm78 Firmware=1.43
Microchip Bm78
Microchip Bm83 Firmware=1.43
Microchip Bm83
Microchip Rn4870 Firmware=1.43
Microchip RN4870
Microchip Rn4871 Firmware=1.43
Microchip Rn4871
Microchip Bm70 Firmware=1.43
Microchip Bm70
Microchip Bm71 Firmware=1.43
Microchip Bm71
Microchip Pic Lightblue Explorer Demo Firmware=4.2_dt100112
Microchip PIC LightBlue Explorer Demo
Microchip Is1870 Firmware=1.43
Microchip Is1870
Microchip Is1871 Firmware=1.43
Microchip Is1871
All of the following
Microchip Bm78 Firmware=1.43
Microchip Bm78
All of the following
Microchip Bm83 Firmware=1.43
Microchip Bm83
All of the following
Microchip Rn4870 Firmware=1.43
Microchip RN4870
All of the following
Microchip Rn4871 Firmware=1.43
Microchip Rn4871
All of the following
Microchip Bm70 Firmware=1.43
Microchip Bm70
All of the following
Microchip Bm71 Firmware=1.43
Microchip Bm71
All of the following
Microchip Pic Lightblue Explorer Demo Firmware=4.2_dt100112
Microchip PIC LightBlue Explorer Demo
All of the following
Microchip Is1870 Firmware=1.43
Microchip Is1870
All of the following
Microchip Is1871 Firmware=1.43
Microchip Is1871
Event History
Dec 19, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-46402?
The severity of CVE-2022-46402 is medium, with a severity value of 6.5.
2
Which software versions are affected by CVE-2022-46402?
The Microchip RN4870 module firmware version 1.43 and the Microchip PIC LightBlue Explorer Demo firmware version 4.2 DT100112 are affected by CVE-2022-46402.
3
How can I fix CVE-2022-46402?
To fix CVE-2022-46402, update the Microchip RN4870 module firmware to a version that addresses the vulnerability.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-46402?
The Common Weakness Enumeration (CWE) ID for CVE-2022-46402 is CWE-354.
5
Where can I find more information about CVE-2022-46402?
You can find more information about CVE-2022-46402 on the Microchip website and the proceedings article provided in the references.