Strix
26.1K

CVE-2022-46399

HIGHCVSS 7.5/10EPSS 0.75%

Last modified

CVE-2022-46399 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.. EPSS estimates a 0.75% chance of exploitation in the next 30 days.

Description

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.75%

50.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
MicrochipBm78 Firmware1.43
MicrochipBm83 Firmware1.43
MicrochipRn4870 Firmware1.43
MicrochipRn4871 Firmware1.43
MicrochipBm70 Firmware1.43
MicrochipBm71 Firmware1.43
MicrochipPic Lightblue Explorer Demo Firmware4.2_dt100112
MicrochipBm64 Firmware1.43
MicrochipBm77 Firmware1.43
MicrochipIs1870 Firmware1.43
MicrochipIs1871 Firmware1.43
MicrochipRn4678 Firmware1.43
MicrochipPic32cx1012bz25048 Firmware1.43
MicrochipWbz451 Firmware1.43

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-46399?
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.
How severe is CVE-2022-46399?
CVE-2022-46399 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.75% probability of exploitation in the next 30 days.
How do I fix CVE-2022-46399?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-46399?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST