Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection

Exploit Title: Microchip TimeProvider 4100 Grandmaster Data plot modules 2.4.6 - SQL Injection Exploit Author: Armando Huesca Prida, Marco Negro Discovered By: Armando Huesca Prida, Marco Negro, Antonio Carriero, Vito Pistillo, Davide Renna, Manuel Leone, Massimiliano Brolli Date of Disclosure:...

CVE-2024-7801

creationtimestamp| type| source ---|---|--- 2024-10-04 22:43:38+00:00| seen| https://t.me/cvedetector/7020 2025-04-05 05:46:36+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lm2a5eeiuo2z...

CVE-2024-7801

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Microchip TimeProvider 4100 Data plot modules allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7...

CVE-2024-7801

CVE-2024-7801 affects Microchip TimeProvider 4100 Grandmaster/Data plot modules. Public records indicate an SQL injection in get_chart_data affecting TimeProvider 4100 from firmware 1.0 up to but not including 2.4.7, with remediation to upgrade to 2.4.7 or later. Exploit-DB documents a test explo...

CVE-2024-7801 SQL injection in get_chart_data in TimeProvider 4100

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Microchip TimeProvider 4100 Data plot modules allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7...