CVE Vulnerabilities

CVE-2024-29155

Failure to Handle Incomplete Element

Published: Oct 16, 2024 | Modified: Aug 29, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.

Weakness

The product does not properly handle when a particular element is not completely specified.

References