Timeprovider 4100
Approved changes feed: RSS · Atom
cpe:2.3:a:microchip:timeprovider_4100:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Microchip (838cafee-4381-5a32-ab83-9c6c625fa8b6) |
|---|---|
| Product | Timeprovider 4100 (ada2ace9-7f5c-5ed8-8cb9-075d5ac3525a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9054 |
vulnerable | 2026-06-08 07:00:26.566629 |
Remote code Execution inTimeProvider® 4100
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
Published: 2024-10-04T19:42:44.129Z
Updated: 2025-08-29T20:24:45.480Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7801 |
vulnerable | 2026-06-08 06:58:23.454478 |
SQL injection in get_chart_data in TimeProvider 4100
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
Published: 2024-10-04T19:38:08.280Z
Updated: 2024-10-04T22:16:19.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43687 |
vulnerable | 2026-06-08 06:45:52.855159 |
XSS vulnerability in bannerconfig endpoint in TimeProvider 4100
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
Published: 2024-10-04T19:41:15.354Z
Updated: 2025-05-23T15:13:13.627Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43686 |
vulnerable | 2026-06-08 06:45:52.854434 |
Reflected XSS in TimeProvider 4100 chart component
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) allows Reflected XSS.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
Published: 2024-10-04T19:47:06.117Z
Updated: 2024-10-07T20:42:38.819Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43685 |
vulnerable | 2026-06-08 06:45:52.853984 |
Session token fixation in TimeProvider 4100
Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
Published: 2024-10-04T19:48:53.595Z
Updated: 2025-08-29T20:21:47.659Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43684 |
vulnerable | 2026-06-08 06:45:52.853450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43683 |
vulnerable | 2026-06-08 06:45:52.852078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.