Approved changes feed: RSS · Atom

cpe:2.3:a:microchip:miwi:6.5:*:*:*:*:*:*:*

part: a version: 6.5 update: *

VendorMicrochip (838cafee-4381-5a32-ab83-9c6c625fa8b6)
ProductMiwi (a770fe74-d062-59d6-9d03-17421c1c87b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-37605 vulnerable 2026-06-08 05:32:54.469126 Details available
In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes.
Published: 2021-08-05T15:52:38.000Z
Updated: 2024-08-04T01:23:01.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-37604 vulnerable 2026-06-08 05:32:54.468652 Details available
In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by injecting messages with a sufficiently large frame counter value and invalid payload. This results in denial of service/valid packets in the network. There is also a possibility of a replay attack in the stack.
Published: 2021-08-05T15:43:37.000Z
Updated: 2024-08-04T01:23:01.238Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.