CVE-2022-46401: Microchip BM64 Firmware

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.

Affected products

• Microchip BM64 Firmware: version 1.43 only
• Microchip BM70 Firmware: version 1.43 only
• Microchip BM71 Firmware: version 1.43 only
• Microchip BM77 Firmware: version 1.43 only
• Microchip BM78 Firmware: version 1.43 only
• Microchip BM83 Firmware: version 1.43 only
• Microchip PIC32CX1012BZ25048 Firmware: affected versions not specified
• Microchip Pic Lightblue Explorer Demo Firmware: version 4.2_dt100112 only
• Microchip RN4678 Firmware: version 1.43 only
• Microchip RN4870 Firmware: version 1.43 only
• Microchip RN4871 Firmware: version 1.43 only
• Microchip WBZ451 Firmware: affected versions not specified

Published 2022-12-19. Last modified 2026-06-17.