{"schemaVersion":3,"id":"CVE-2022-46399","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.","dates":{"published":"2022-12-19T00:00:00.000Z","modified":"2025-04-17T14:36:42.589Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00768,"percentile":0.54838,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.022000000000000058,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00746},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00768,"percentile":0.54838}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00746,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00768,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00768,"percentile":0.54838}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_635126FFFB501D69","name":"Exploit Reference (computer.org)","source":"reference","url":"https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"}],"affected":[{"vendor":"microchip","product":"bm64_firmware","name":"bm64 firmware","label":"bm64_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/bm64"},{"vendor":"microchip","product":"bm70_firmware","name":"bm70 firmware","label":"bm70_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/bm70"},{"vendor":"microchip","product":"bm71_firmware","name":"bm71 firmware","label":"bm71_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/bm71"},{"vendor":"microchip","product":"bm77_firmware","name":"bm77 firmware","label":"bm77_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/bm77"},{"vendor":"microchip","product":"bm78_firmware","name":"bm78 firmware","label":"bm78_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/bm78"},{"vendor":"microchip","product":"bm83_firmware","name":"bm83 firmware","label":"bm83_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/bm83"},{"vendor":"microchip","product":"is1870_firmware","name":"is1870 firmware","label":"is1870_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/is1870"},{"vendor":"microchip","product":"is1871_firmware","name":"is1871 firmware","label":"is1871_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/is1871"},{"vendor":"microchip","product":"pic_lightblue_explorer_demo_firmware","name":"pic lightblue explorer demo firmware","label":"pic_lightblue_explorer_demo_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"4.2_dt100112","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.2_dt100112","eol":null,"hubHref":"/vendor/microchip/pic_lightblue_explorer_demo"},{"vendor":"microchip","product":"pic32cx1012bz25048_firmware","name":"pic32cx1012bz25048 firmware","label":"pic32cx1012bz25048_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/pic32cx1012bz25048"},{"vendor":"microchip","product":"rn4678_firmware","name":"rn4678 firmware","label":"rn4678_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/rn4678"},{"vendor":"microchip","product":"rn4870_firmware","name":"rn4870 firmware","label":"rn4870_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/rn4870"},{"vendor":"microchip","product":"rn4871_firmware","name":"rn4871 firmware","label":"rn4871_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/rn4871"},{"vendor":"microchip","product":"wbz451_firmware","name":"wbz451 firmware","label":"wbz451_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.43","eol":null,"hubHref":"/vendor/microchip/wbz451"}],"affectedCount":14,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG","label":"www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG","hostname":"www.computer.org","tags":["Third Party Advisory"]},{"url":"https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM","label":"www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM","hostname":"www.computer.org","tags":["Exploit","Technical Description","Third Party Advisory"]},{"url":"https://microchip.com","label":"microchip.com","hostname":"microchip.com","tags":["Product"]},{"url":"https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le","label":"www.microchip.com/en-us/…","hostname":"www.microchip.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-12-19T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-04-17T14:36:42.589Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:00:49.645Z","stale":false,"partial":false}}