PT-2025-42796

CVE-2025-47901

Published

2025-10-20

Updated

2025-10-23

Description by

CVSS 4.0

8.9

High

MetricsAV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Microchip Time Provider 4100 versions prior to 2.5

Description An improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Microchip Time Provider 4100. This allows for OS Command Injection. The issue relates to restoring the configuration password.

Recommendations Update Microchip Time Provider 4100 to version 2.5 or later.

Exploitability

Fix

Impacts

Researchers