CVE-2024-29155
CVSS V2 None
CVSS V3 None
Description
On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is
received, the device becomes incapable of completing the pairing
process. A third party can inject a second PairReqNoInputNoOutput request
just after a real one, causing the pair request to be blocked.
Overview
- CVE ID
- CVE-2024-29155
- Assigner
- Microchip
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-10-16T15:51:11.819Z
- Last Modified Date
- 2024-10-16T17:13:36.247Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.microchip.com/en-us/product/rn4870 | product |
| https://ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zip | release-notes product technical-description |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-29155 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29155 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-10-17 13:14:13 | Added to TrackCVE |