Microchip
microchip
55 CVEs • 212 products
Products (212)
Click to collapseToggle
Products (212)
Click to collapse
CVEs (55)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microchip 1Gridtime 3000 Firmware Jul 9, 2026 Jun 19, 2026 5.3 MEDIUM· v4 5.4 MEDIUM· v3 N/A· v2 The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission.
This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. |
1Microchip 1Gridtime 3000 Firmware Jul 9, 2026 Jun 19, 2026 5.3 MEDIUM· v4 5.4 MEDIUM· v3 N/A· v2 Improper neutralization of input during web page generation XSS
vulnerability in the GridTime 3000 (password reset form) allows XSS.
This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0. |
1Microchip 1Gridtime 3000 Firmware Jul 9, 2026 Jun 19, 2026 4.6 MEDIUM· v4 6.5 MEDIUM· v3 N/A· v2 The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints.
This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. |
1Microchip 1Gridtime 3000 Firmware Jul 9, 2026 Jun 19, 2026 5.1 MEDIUM· v4 5.4 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue affects GridTime 3000: from 1.0r0.03 thr...Show more |
A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax_auth session cookie and forge a new cookie with admi...Show more |
1Microchip 1Timeprovider 4100 Firmware Aug 12, 2026 Mar 28, 2026 5.5 MEDIUM· v4 9.8 CRITICAL· v3 N/A· v2 Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0. |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3...Show more |
Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2. |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Feb 24, 2026 5.7 MEDIUM· v4 4.1 MEDIUM· v3 N/A· v2 Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5. |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 20, 2025 7.1 HIGH· v4 8.8 HIGH· v3 N/A· v2 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5. |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 20, 2025 8.9 HIGH· v4 8.8 HIGH· v3 N/A· v2 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5. |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 20, 2025 8.9 HIGH· v4 8.8 HIGH· v3 N/A· v2 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5. |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 4, 2024 8.5 HIGH· v4 8.8 HIGH· v3 N/A· v2 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules)...Show more |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 4, 2024 6.3 MEDIUM· v4 6.5 MEDIUM· v3 N/A· v2 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 be...Show more |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 4, 2024 7.7 HIGH· v4 6.1 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This issue affects TimePr...Show more |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 4, 2024 5.4 MEDIUM· v4 6.1 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) allows Reflected XSS.This issue affects TimeProvider 4100: from...Show more |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 4, 2024 8.7 HIGH· v4 9.8 CRITICAL· v3 N/A· v2 Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 before 2.4.7. |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 4, 2024 8.7 HIGH· v4 8.8 HIGH· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0. |
1Microchip 1Timeprovider 4100 Firmware Jun 17, 2026 Oct 4, 2024 8.7 HIGH· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0. |
1Microchip 1Advanced Software Framework Jun 17, 2026 Aug 8, 2024 9.5 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program fil...Show more |