CVE-2022-46400: Microchip BM70 Firmware

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing.

Affected products

• Microchip BM70 Firmware: version 1.43 only
• Microchip BM71 Firmware: version 1.43 only
• Microchip BM78 Firmware: version 1.43 only
• Microchip BM83 Firmware: version 1.43 only
• Microchip IS1870 Firmware: version 1.43 only
• Microchip IS1871 Firmware: version 1.43 only
• Microchip Pic Lightblue Explorer Demo Firmware: version 4.2_dt100112 only
• Microchip RN4870 Firmware: version 1.43 only
• Microchip RN4871 Firmware: version 1.43 only

Published 2022-12-19. Last modified 2026-06-17.