CVE-2024-29155 - OpenCVE

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zip
https://www.microchip.com/en-us/product/rn4870

History

Wed, 16 Oct 2024 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 16 Oct 2024 16:00:00 +0000

Type	Values Removed	Values Added
Description		On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.
Title		Denial of service on Microchip RN4870 devices
Weaknesses		CWE-20
References		https://ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zip https://www.microchip.com/en-us/product/rn4870
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: Microchip

Published: 2024-10-16T15:51:11.819Z

Updated: 2024-10-16T17:13:36.247Z

Reserved: 2024-03-18T06:11:27.983Z

Link: CVE-2024-29155

Vulnrichment

Updated: 2024-10-16T17:13:30.510Z

NVD

Status : Awaiting Analysis

Published: 2024-10-16T16:15:03.630

Modified: 2024-10-16T16:38:14.557

Link: CVE-2024-29155

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-29155", "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "state": "PUBLISHED", "assignerShortName": "Microchip", "dateReserved": "2024-03-18T06:11:27.983Z", "datePublished": "2024-10-16T15:51:11.819Z", "dateUpdated": "2024-10-16T17:13:36.247Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "RN4870", "vendor": "Microchip", "versions": [{"lessThan": "1.44", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Wu, Tianwei"}, {"lang": "en", "type": "finder", "value": "Hussain Syed Rafiul"}, {"lang": "en", "type": "finder", "value": "Ishtiaq, Abdullah Al"}, {"lang": "en", "type": "finder", "value": "RASHID, SYED MD MUKIT"}, {"lang": "en", "type": "reporter", "value": "The Pennsylvania State University"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is \nreceived, the device becomes incapable of completing the pairing \nprocess. A third party can inject a second PairReqNoInputNoOutput request \njust after a real one, causing the pair request to be blocked."}], "value": "On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is \nreceived, the device becomes incapable of completing the pairing \nprocess. A third party can inject a second PairReqNoInputNoOutput request \njust after a real one, causing the pair request to be blocked."}], "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Flooding"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "shortName": "Microchip", "dateUpdated": "2024-10-16T15:51:11.819Z"}, "references": [{"tags": ["product"], "url": "https://www.microchip.com/en-us/product/rn4870"}, {"tags": ["release-notes", "product", "technical-description"], "url": "https://ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zip"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Update to firmware version 1.44 or higher.<br>"}], "value": "Update to firmware version 1.44 or higher."}], "source": {"advisory": "PSIRT-37", "discovery": "UNKNOWN"}, "title": "Denial of service on Microchip RN4870 devices", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-16T17:13:24.313288Z", "id": "CVE-2024-29155", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-16T17:13:36.247Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-29155", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-16T17:13:24.313288Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-16T17:13:30.510Z"}}], "cna": {"title": "Denial of service on Microchip RN4870 devices", "source": {"advisory": "PSIRT-37", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Wu, Tianwei"}, {"lang": "en", "type": "finder", "value": "Hussain Syed Rafiul"}, {"lang": "en", "type": "finder", "value": "Ishtiaq, Abdullah Al"}, {"lang": "en", "type": "finder", "value": "RASHID, SYED MD MUKIT"}, {"lang": "en", "type": "reporter", "value": "The Pennsylvania State University"}], "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Flooding"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Microchip", "product": "RN4870", "versions": [{"status": "affected", "version": "0", "lessThan": "1.44", "versionType": "semver"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update to firmware version 1.44 or higher.", "supportingMedia": [{"type": "text/html", "value": "Update to firmware version 1.44 or higher.<br>", "base64": false}]}], "references": [{"url": "https://www.microchip.com/en-us/product/rn4870", "tags": ["product"]}, {"url": "https://ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zip", "tags": ["release-notes", "product", "technical-description"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is \nreceived, the device becomes incapable of completing the pairing \nprocess. A third party can inject a second PairReqNoInputNoOutput request \njust after a real one, causing the pair request to be blocked.", "supportingMedia": [{"type": "text/html", "value": "On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is \nreceived, the device becomes incapable of completing the pairing \nprocess. A third party can inject a second PairReqNoInputNoOutput request \njust after a real one, causing the pair request to be blocked.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "shortName": "Microchip", "dateUpdated": "2024-10-16T15:51:11.819Z"}}}, "cveMetadata": {"cveId": "CVE-2024-29155", "state": "PUBLISHED", "dateUpdated": "2024-10-16T17:13:36.247Z", "dateReserved": "2024-03-18T06:11:27.983Z", "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "datePublished": "2024-10-16T15:51:11.819Z", "assignerShortName": "Microchip"}, "dataVersion": "5.1"}