Vendors / Microchip Records 60 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 11
CVSS high 19
Exploited now Microchip records in CISA KEV No Microchip vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.00889 · Published 2022-12-19 · No fix listed CWE-755
Priority LOW 36
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.
CVSS 3.1 HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00768 · Published 2022-12-19 · No fix listed CWE-400
Priority LOW 29
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values.
CVSS 3.1 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00493 · Published 2022-12-19 · No fix listed CWE-354
Priority LOW 26
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.
CVSS 3.1 MEDIUM 5.4· Adjacent network · No auth · No interaction · EPSS 0.00676 · Published 2022-12-19 · No fix listed CWE-20
Priority LOW 25
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing.
CVSS 3.1 MEDIUM 5.4· Adjacent network · No auth · No interaction · EPSS 0.00639 · Published 2022-12-19 · No fix listed CWE-287
Open these records in search → All records by CVSS severity
11 19 30 0 0
THREATIST.IORead the docs