CVE-2022-46401

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p50

Published

Dec 19, 2022 (Dec 19, 2022)

Modified

Jun 17, 2026

Description

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.

Vendors: microchip
Products: bm78 firmware, bm83 firmware, rn4870 firmware, rn4871 firmware, bm70 firmware, bm71 firmware, pic lightblue explorer demo firmware, pic32cx1012bz25048 firmware, wbz451 firmware, rn4678 firmware, bm77 firmware, bm64 firmware
Weakness: CWE-20
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.