Skip to content
OpenAdvisories
High · 7.1 CVE-2025-47902 EUVD-2025-35090GHSA-3q9q-g98g-m25j

SQL Injection in web resource

Published Oct 20, 2025 · Updated Mar 31, 2026 · Assigned by Microchip

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5.

Affected products

VendorProductAffectedFixed
Microchip Time Provider 4100 < 2.5 2.5

References