CVE search · CVE-2025-47901
CVE-2025-47901
high 8.9
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
Details
- Status
- Modified
- Published
- Last changed
- Source
- dc3f6da9-85b5-4a73-84a2-2ec90b40fca5
- Weakness
- CWE-78
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | high 8.9 | CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
dc3f6da9-85b5-4a73-84a2-2ec90b40fca5Secondary |
| CVSS 3.1 | high 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- microchip · timeprovider_4100_firmware