CVE-2022-46402: Microchip BM70 Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values.

Affected products

• Microchip BM70 Firmware: version 1.43 only
• Microchip BM71 Firmware: version 1.43 only
• Microchip BM78 Firmware: version 1.43 only
• Microchip BM83 Firmware: version 1.43 only
• Microchip IS1870 Firmware: version 1.43 only
• Microchip IS1871 Firmware: version 1.43 only
• Microchip Pic Lightblue Explorer Demo Firmware: version 4.2_dt100112 only
• Microchip RN4870 Firmware: version 1.43 only
• Microchip RN4871 Firmware: version 1.43 only

Published 2022-12-19. Last modified 2026-06-17.