Skip to content

Product

Microchip Time Provider 4100 vulnerabilities

5 published CVES affecting Microchip Time Provider 4100, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
5
Critical
0
High
3
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest Microchip Time Provider 4100 CVEs

Newest publication first

  1. CVE-2025-9497 Hardcoded Upgrade Decryption Passwords

    Published
    MediumCVSS 5.5 EPSS 0.33%

    Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0.

  2. CVE-2025-47904 Unsigned upgrade package

    Published
    MediumCVSS 5.7 EPSS 0.10%

    Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.

  3. CVE-2025-47902 SQL Injection in web resource

    Published
    HighCVSS 7.1 EPSS 0.39%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5.

  4. CVE-2025-47901 RCE on restore configuration password

    Published
    HighCVSS 8.9 EPSS 1.4%

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.

  5. CVE-2025-47900 RCE on backup configuration password

    Published
    HighCVSS 8.9 EPSS 1.4%

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.