Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Microchip Time Provider 4100 2.5 Clear all filters
TI-2025-30307 CVE-2025-47902 · GHSA-3q9q-g98g-m25j

SQL Injection in web resource

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5.

CVSS 4.0HIGH 7.1 Adjacent network Low privileges No interaction EPSS 0.00378 Published 2025-10-20 Fixed in 2.5 CWE-89
TI-2025-30306 CVE-2025-47901 · GHSA-6837-c8wf-6wp7

RCE on restore configuration password

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.

CVSS 4.0HIGH 8.9 Adjacent network Low privileges No interaction EPSS 0.0138 Published 2025-10-20 Fixed in 2.5 CWE-78
TI-2025-30305 CVE-2025-47900 · GHSA-v89w-3c42-rprg

RCE on backup configuration password

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.

CVSS 4.0HIGH 8.9 Adjacent network Low privileges No interaction EPSS 0.0138 Published 2025-10-20 Fixed in 2.5 CWE-78