CVE-2022-46402

CVSS V2 None CVSS V3 None
Description
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values.
Overview
  • CVE ID
  • CVE-2022-46402
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-19T23:15:11
  • Last Modified Date
  • 2022-12-27T20:00:42
Weakness Enumerations
CWE URL
CWE-354 http://cwe.mitre.org/data/definitions/354.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:microchip:bm78_firmware:1.43:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:microchip:bm78:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:microchip:bm83_firmware:1.43:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:microchip:bm83:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:microchip:rn4870_firmware:1.43:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:microchip:rn4870:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:microchip:rn4871_firmware:1.43:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:microchip:rn4871:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:microchip:bm70_firmware:1.43:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:microchip:bm70:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:microchip:bm71_firmware:1.43:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:microchip:bm71:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:microchip:pic_lightblue_explorer_demo_firmware:4.2_dt100112:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:microchip:pic_lightblue_explorer_demo:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:microchip:is1870_firmware:1.43:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:microchip:is1870:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:microchip:is1871_firmware:1.43:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:microchip:is1871:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://microchip.com
https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM
https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG
https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-46402
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46402
History
Created Old Value New Value Data Type Notes
2022-12-20 01:15:07 Added to TrackCVE
2022-12-20 03:15:29 2022-12-19T23:15:11.087 2022-12-19T23:15:11 CVE Published Date updated
2022-12-20 03:15:29 2022-12-20T02:47:33 CVE Modified Date updated
2022-12-20 03:15:29 Received Awaiting Analysis Vulnerability Status updated
2022-12-21 20:16:14 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-27 20:15:01 2022-12-27T20:00:42 CVE Modified Date updated
2022-12-27 20:15:01 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-27 20:15:02 Weakness Enumeration new
2022-12-27 20:15:04 CPE Information updated