CVE-2024-29155

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.

Credits

Wu, Tianwei
Hussain Syed Rafiul
Ishtiaq, Abdullah Al
RASHID, SYED MD MUKIT
The Pennsylvania State University

References