CVE-2024-29155 - CVE House
Back to Database
Status published Medium CVE-2024-29155

Denial of service on Microchip RN4870 devices

Vulnerability Description

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-29155

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Wu, Tianwei
  • Hussain Syed Rafiul
  • Ishtiaq, Abdullah Al
  • RASHID, SYED MD MUKIT
  • The Pennsylvania State University

References

More from Microchip

View All →
CVE-2025-9497
Hardcoded Upgrade Decryption Passwords
Medium 5.5
CVE-2025-47904
Unsigned upgrade package
Medium 5.7
CVE-2025-47902
SQL Injection in web resource
High 7.1
CVE-2025-47901
RCE on restore configuration password
High 8.9
CVE-2025-47900
RCE on backup configuration password
High 8.9

Affected Vendor

Affected Software

RN4870
Vulnerable Versions:
0

Timeline

Official Publish: October 16th, 2024
Last Modified: September 2nd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-239

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.