Microchip GridTime 3000 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microchip GridTime 3000: 4 record(s), with affected versions and fixes.
CVE-2026-12622
Medium · 5.4
CWE-601 Jun 19, 2026
Open Redirect Vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time Server
The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission.
This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.
CVE-2026-12621
Medium · 5.4
CWE-79 Jun 19, 2026
Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time Server
Improper neutralization of input during web page generation XSS
vulnerability in the GridTime 3000 (password reset form) allows XSS.
This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0.
CVE-2026-12620
Medium · 6.5
CWE-200 Jun 19, 2026
Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server
The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints.
This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.
CVE-2026-12619
Medium · 5.4
CWE-79 Jun 19, 2026
GridTime™ 3000 GNSS Time Server CSRF to XSS
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS).
This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.