Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-29155 EUVD-2024-26189GHSA-hw2r-jgp3-3h2v

Denial of service on Microchip RN4870 devices

Published Oct 16, 2024 · Updated Sep 2, 2025 · Assigned by Microchip

Description

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is
received, the device becomes incapable of completing the pairing
process. A third party can inject a second PairReqNoInputNoOutput request
just after a real one, causing the pair request to be blocked.

Affected products

VendorProductAffectedFixed
Microchip RN4870 < 1.44 1.44

References