Vulnerability CVE-2024-29155


Published: 2024-10-16

Description:
On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is
received, the device becomes incapable of completing the pairing
process. A third party can inject a second PairReqNoInputNoOutput request
just after a real one, causing the pair request to be blocked.

 References:
https://www.microchip.com/en-us/product/rn4870
https://ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zip

Copyright 2024, cxsecurity.com

 

Back to Top