TI-2024-29290 Aliases CVE-2024-43687 GHSA-r25f-mfgv-vq97

XSS vulnerability in bannerconfig endpoint in TimeProvider 4100

LOW 35CWE-79Published 2024-10-04 · Updated 2025-05-23

Key facts

Attack vector: Adjacent network
Privileges required: None
User interaction: None
Attack complexity: High
Attack requirements: Present
Impact type: Cross-site scripting
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00833 57th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed TimeProvider 4100 (Microchip): 2.4.7, 2.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Microchip	TimeProvider 4100	1.0 to before 2.4.7; 2.4.16 to before 2.5	2.4.7, 2.5	Patch available	CNA

TimeProvider 4100 VendorMicrochip Affected 1.0 to before 2.4.7; 2.4.16 to before 2.5 Fixed in 2.4.7, 2.5 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:microchip:timeprovider_4100_firmware::::::::	1.0 to before 2.4.7	Vulnerable	Microchip
cpe:2.3:h:microchip:timeprovider_4100:-:::::::*	not specified by NVD	Running on	Microchip

cpe:2.3:o:microchip:timeprovider_4100_firmware:*:*:*:*:*:*:*:* Versions 1.0 to before 2.4.7 Vulnerable ·Microchip
cpe:2.3:h:microchip:timeprovider_4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microchip

Remediation

Fix · CNA TimeProvider 4100 (Microchip) Fixed in 2.4.7, 2.5

Timeline

2026-10-02 Threatist record created from CVE-2024-43687
2026-10-03 Alias added: GHSA-r25f-mfgv-vq97

References

Exploit 1

https://www.gruppotim.it/it/footer/red-team.html

Advisory 1

https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timeprovider-4100-grandmaster-stored-xss-vulnerability-in-banner

TI-2024-08405 Remote code Execution inTimeProvider® 4100 CVSS 4.0HIGH 8.5
TI-2025-30306 RCE on restore configuration password CVSS 4.0HIGH 8.9
TI-2025-30305 RCE on backup configuration password CVSS 4.0HIGH 8.9
TI-2024-29288 Session token fixation in TimeProvider 4100 CVSS 4.0HIGH 8.7
TI-2024-29289 Reflected XSS in TimeProvider 4100 chart component CVSS 4.0MEDIUM 5.4
TI-2024-29287 Cross-Site Request Forgery vulnerability in TimeProvider 4100 CVSS 4.0HIGH 8.7

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences