Approved changes feed: RSS · Atom

cpe:2.3:o:microchip:timeprovider_4100_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMicrochip (838cafee-4381-5a32-ab83-9c6c625fa8b6)
ProductTimeprovider 4100 Firmware (6cb77357-957e-5e0b-b998-2d129d9cc1b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-47904 vulnerable 2026-06-08 07:27:15.053704 Unsigned upgrade package
Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.
Published: 2026-02-24T15:34:20.905Z
Updated: 2026-03-31T10:39:23.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47902 vulnerable 2026-06-08 07:27:15.053196 SQL Injection in web resource
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5.
Published: 2025-10-20T17:52:52.844Z
Updated: 2026-03-31T10:38:57.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47901 vulnerable 2026-06-08 07:27:15.052751 RCE on restore configuration password
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
Published: 2025-10-20T17:48:20.775Z
Updated: 2026-03-31T10:38:33.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47900 vulnerable 2026-06-08 07:27:15.051212 RCE on backup configuration password
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
Published: 2025-10-20T17:43:33.890Z
Updated: 2026-03-31T10:38:11.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9054 vulnerable 2026-06-08 07:00:26.565618 Remote code Execution inTimeProvider® 4100
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
Published: 2024-10-04T19:42:44.129Z
Updated: 2025-08-29T20:24:45.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7801 vulnerable 2026-06-08 06:58:23.455393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43687 vulnerable 2026-06-08 06:45:52.855192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43686 vulnerable 2026-06-08 06:45:52.854581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43685 vulnerable 2026-06-08 06:45:52.853949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43684 vulnerable 2026-06-08 06:45:52.853301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43683 vulnerable 2026-06-08 06:45:52.851487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.