Skip to content
OpenAdvisories

Vendor

Microchip

24 known vulnerabilities.

Products

TimeProvider 4100 7 Time Provider 4100 5 GridTime 3000 4 TimePictra 2 RN4870 1 MPLAB® Harmony 3 Core Module 1 AN1044 1 AN953 1 SW300052 1 SAME70 1 SAMS70 1 SAMV70 1 SAMV71 1 SAMG55 1 SAM4C 1 SAM4S 1 SAM4N 1 SAM4E 1 SAM3S 1 SAM3N 1 SAM3U 1 IStaX 1 SAMA5D4 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.3
    CVE-2026-18349

    SAMA5D44 Fault Injection Vulnerability

    Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4.

    Microchip SAMA5D4
  • High 8.7
    CVE-2026-2336

    Weak webstax_auth Cookie Authentication Allows Privilege Escalation

    A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax_auth session cookie and forge a new cookie with administrative privileges.This issue affect…

    Microchip IStaX
  • High 7.1
    CVE-2025-47902

    SQL Injection in web resource

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5.

    Microchip Time Provider 4100
  • High 8.9
    CVE-2025-47901

    RCE on restore configuration password

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.

    Microchip Time Provider 4100
  • High 8.9
    CVE-2025-47900

    RCE on backup configuration password

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.

    Microchip Time Provider 4100
  • High 8.7
    CVE-2024-43683

    Improper verification of the Host header in TimeProvider 4100

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0.

    Microchip TimeProvider 4100
  • High 8.7
    CVE-2024-43684

    Cross-Site Request Forgery vulnerability in TimeProvider 4100

    Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0.

    Microchip TimeProvider 4100
  • High 8.7
    CVE-2024-43685

    Session token fixation in TimeProvider 4100

    Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

    Microchip TimeProvider 4100
  • High 8.5
    CVE-2024-9054 Public exploit EPSS 16%

    Remote code Execution inTimeProvider® 4100

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue aff…

    Microchip TimeProvider 4100
  • High 7.7
    CVE-2024-43687 Public exploit

    XSS vulnerability in bannerconfig endpoint in TimeProvider 4100

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

    Microchip TimeProvider 4100
  • High 7.0
    CVE-2024-30212 Public exploit

    Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command

    If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned to the user. If the block count is increased, the full RAM ca…

    Microchip MPLAB® Harmony 3 Core Module