Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-9497 EUVD-2025-209112GHSA-gv5m-4fg8-r764

Hardcoded Upgrade Decryption Passwords

Published Mar 28, 2026 · Updated Apr 1, 2026 · Assigned by Microchip

Description

Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0.

Affected products

VendorProductAffectedFixed
Microchip Time Provider 4100 < 2.5.0 2.5.0

References