CVE-2024-43683

Name of the Vulnerable Software and Affected Versions Microchip TimeProvider 4100 versions 1.0 and later

Description The issue is related to a URL Redirection to Untrusted Site ('Open Redirect') vulnerability that allows XSS Through HTTP Headers. This can lead to security issues, as it enables malicious activities through HTTP headers.

Recommendations For Microchip TimeProvider 4100 versions 1.0 and later, consider disabling the HTTP header processing functionality until a patch is available. Restrict access to the affected system to minimize the risk of exploitation. Avoid using the vulnerable system for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.