Microchip Time Provider 4100 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microchip Time Provider 4100: 5 record(s), with affected versions and fixes.
CVE-2025-9497
Critical · 9.8
CWE-798 Mar 28, 2026
Hardcoded Upgrade Decryption Passwords
Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0.
CVE-2025-47904
Medium · 4.1
CWE-494 Feb 24, 2026
Unsigned upgrade package
Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.
CVE-2025-47902
High · 8.8
CWE-89 Oct 20, 2025
SQL Injection in web resource
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5.
CVE-2025-47901
High · 8.8
CWE-78 Oct 20, 2025
RCE on restore configuration password
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
CVE-2025-47900
High · 8.8
CWE-78 Oct 20, 2025
RCE on backup configuration password
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.