CVE search · CVE-2025-47900
CVE-2025-47900
high 8.9
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
Details
- Status
- Modified
- Published
- Last changed
- Source
- dc3f6da9-85b5-4a73-84a2-2ec90b40fca5
- Weakness
- CWE-78
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | high 8.9 | CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
dc3f6da9-85b5-4a73-84a2-2ec90b40fca5Secondary |
| CVSS 3.1 | high 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- microchip · timeprovider_4100_firmware