What’s Vulnerable › Products

Microchip TimeProvider 4100 vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Microchip TimeProvider 4100 version is affected

Latest Microchip TimeProvider 4100 vulnerabilities

• CVE-2025-9497 — Hardcoded Upgrade Decryption Passwords (CVSS 9.8)
• CVE-2025-47904 — Unsigned upgrade package (CVSS 4.1)
• CVE-2025-47902 — SQL Injection in web resource (CVSS 8.8)
• CVE-2025-47901 — RCE on restore configuration password (CVSS 8.8)
• CVE-2025-47900 — RCE on backup configuration password (CVSS 8.8)
• CVE-2024-9054 — Remote code Execution inTimeProvider® 4100 (CVSS 8.8)
• CVE-2024-7801 — SQL injection in get_chart_data in TimeProvider 4100 (CVSS 6.5)
• CVE-2024-43687 — XSS vulnerability in bannerconfig endpoint in TimeProvider 4100 (CVSS 6.1)
• CVE-2024-43686 — Reflected XSS in TimeProvider 4100 chart component (CVSS 6.1)
• CVE-2024-43685 — Session token fixation in TimeProvider 4100 (CVSS 9.8)
• CVE-2024-43684 — Cross-Site Request Forgery vulnerability in TimeProvider 4100 (CVSS 8.8)
• CVE-2024-43683 — Improper verification of the Host header in TimeProvider 4100 (CVSS 6.1)