CVE-2024-29155 Information

Description

On Microchip RN4870 devices when more than one consecutive PairReqNoInputNoOutput request is received the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one causing the pair request to be blocked.

Reference

https://www.microchip.com/en-us/product/rn4870 https://ww1.microchip.com/downloads/aemDocuments/documents/WSG/ProductDocuments/SoftwareLibraries/Firmware/RN4870-71-Firmware-1.44.zip