PT-2025-42791

CVE-2025-47900

Published

2025-10-20

Updated

2025-10-23

Description by

CVSS 4.0

8.9

High

MetricsAV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Microchip Time Provider 4100 versions prior to 2.5

Description An improper neutralization of special elements used in an OS command vulnerability exists in Microchip Time Provider 4100, allowing for OS command injection. This issue relates to remote code execution through the backup configuration password.

Recommendations Update to a version newer than 2.5.

Exploitability

Fix

Impacts

Researchers