Skip to content
OpenAdvisories
High · 8.9 CVE-2025-47901 EUVD-2025-35088GHSA-6837-c8wf-6wp7

RCE on restore configuration password

Published Oct 20, 2025 · Updated Mar 31, 2026 · Assigned by Microchip

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.

Affected products

VendorProductAffectedFixed
Microchip Time Provider 4100 < 2.5 2.5

References