CVE-2022-46403: Microchip BM70 Firmware

High severity, CVSS 8.6. EPSS: 0.9% chance of exploitation in the next 30 days.

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.

Affected products

• Microchip BM70 Firmware: version 1.43 only
• Microchip BM71 Firmware: version 1.43 only
• Microchip BM78 Firmware: version 1.43 only
• Microchip BM83 Firmware: version 1.43 only
• Microchip IS1870 Firmware: version 1.43 only
• Microchip IS1871 Firmware: version 1.43 only
• Microchip Pic Lightblue Explorer Demo Firmware: version 4.2_dt100112 only
• Microchip RN4870 Firmware: version 1.43 only
• Microchip RN4871 Firmware: version 1.43 only

Published 2022-12-19. Last modified 2026-06-17.