CVE-2022-46399: Microchip BM64 Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.

Affected products

• Microchip BM64 Firmware: version 1.43 only
• Microchip BM70 Firmware: version 1.43 only
• Microchip BM71 Firmware: version 1.43 only
• Microchip BM77 Firmware: version 1.43 only
• Microchip BM78 Firmware: version 1.43 only
• Microchip BM83 Firmware: version 1.43 only
• Microchip IS1870 Firmware: version 1.43 only
• Microchip IS1871 Firmware: version 1.43 only
• Microchip PIC32CX1012BZ25048 Firmware: version 1.43 only
• Microchip Pic Lightblue Explorer Demo Firmware: version 4.2_dt100112 only
• Microchip RN4678 Firmware: version 1.43 only
• Microchip RN4870 Firmware: version 1.43 only
• Microchip RN4871 Firmware: version 1.43 only
• Microchip WBZ451 Firmware: version 1.43 only

Published 2022-12-19. Last modified 2026-06-17.