CVE-2024-29155

Medium

Description

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.

SeverityMedium

CVSS4.3

Exploit probability—

ProductRN4870

PublishedOct 16, 2024

First seenOct 16, 2024

Weakness typeCWE-239CWE-239

How to fix

Update

Microchip RN48701.44 or later

Vendor advisories

ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zip

Affected products

Product	Affected versions	Fixed in
Microchip RN4870	v < 1.44	1.44

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.