Description (CNA)
On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microchip / RN4870 | affected 0 before 1.44 |
CWE
CWE-239
References
- https://www.microchip.com/en-us/product/rn4870
- https://ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zip
ADP enrichment
No English description supplied.
No references supplied.