Vulnerabilities > Microchip > High

DATE CVE VULNERABILITY TITLE RISK
2024-10-04 CVE-2024-43684 Cross-Site Request Forgery (CSRF) vulnerability in Microchip Timeprovider 4100 Firmware
Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0.
network
low complexity
microchip CWE-352
8.8
2024-10-04 CVE-2024-9054 OS Command Injection vulnerability in Microchip Timeprovider 4100 Firmware
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
network
low complexity
microchip CWE-78
8.8
2022-12-19 CVE-2022-46399 Unspecified vulnerability in Microchip products
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.
high complexity
microchip
7.5
2022-12-19 CVE-2022-46403 Unspecified vulnerability in Microchip products
The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.
network
low complexity
microchip
8.6