Input Validation and Logic

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes.CVE-2021-37605Microchip · 1.3% likely

   CWE-670

2. In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the messag…CVE-2021-37604Microchip · 1.2% likely

   CWE-670

3. The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.CVE-2022-46403Microchip · CVSS 8.6 · 0.9% likely

   CWE-755

4. The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.CVE-2022-46401Microchip · CVSS 5.4 · 0.7% likely

   CWE-20

5. Denial of service on Microchip RN4870 devicesCVE-2024-29155Microchip · CVSS 4.3 · 0.2% likely

   CWE-239

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.