Product by Microchip
Timeprovider 4100 Firmware
12 known vulnerabilities in Timeprovider 4100 Firmware (Microchip), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-9054 | Remote code Execution inTimeProvider® 4100 | 8.8 | |
| Medium | CVE-2024-43686 | Reflected XSS in TimeProvider 4100 chart component | 6.1 | |
| High | CVE-2025-47901 | RCE on restore configuration password | 8.8 | |
| High | CVE-2025-47900 | RCE on backup configuration password | 8.8 | |
| High | CVE-2024-43687 | XSS vulnerability in bannerconfig endpoint in TimeProvider 4100 | 6.1 | |
| Critical | CVE-2025-9497 | Hardcoded Upgrade Decryption Passwords | 9.8 | |
| Critical | CVE-2024-43685 | Session token fixation in TimeProvider 4100 | 9.8 | |
| Medium | CVE-2024-7801 | SQL injection in get_chart_data in TimeProvider 4100 | 6.5 | |
| High | CVE-2025-47902 | SQL Injection in web resource | 8.8 | |
| High | CVE-2024-43684 | Cross-Site Request Forgery vulnerability in TimeProvider 4100 | 8.8 | |
| High | CVE-2024-43683 | Improper verification of the Host header in TimeProvider 4100 | 6.1 | |
| Medium | CVE-2025-47904 | Unsigned upgrade package | 4.1 |