CVE-2025-9497

Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0...

CVE-2025-9497

Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0...

CVE-2025-9497

The Microchip Time Provider 4100 , a precision time gateway, is vulnerable to a Use of Hard-coded Credentials vulnerability in versions prior to 2.5.0 . The presence of hard-coded upgrade decryption passwords allows an attacker to perform a Malicious Manual Software Update . To remediate this iss...

CVE-2025-9497 Hardcoded Upgrade Decryption Passwords

Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0...

CVE-2025-9497 Hardcoded Upgrade Decryption Passwords

Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0...

CVE-2025-9497: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0...

PT-2026-28307

Name of the Vulnerable Software and Affected Versions Microchip Time Provider 4100 versions prior to 2.5.0 Description The use of hard-coded credentials allows for the execution of a malicious manual software update. Recommendations Update Microchip Time Provider 4100 to version 2.5.0 or later...

mpfs_reset_unregister_adev Heap Buffer Overflow DoS

The vulnerability of the mpfsresetunregisteradev function in the drivers/clk/microchip/clk-mpfs.c file of the frequency controller driver for Samsung Exynos Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

Microchip wireless driver Heap Buffer Overflow DoS

The vulnerability of the wilcnetdevcleanup function in the drivers/net/wireless/microchip/wilc1000/netdev.c driver for MicroChip wireless adapter support in Linux kernel is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause servi...

Linux kernel Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the vcapduprule function in the drivers/net/ethernet/microchip/vcap/vcapapi.c file of the Linux kernel’s network adapter driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-39033

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net: dsa: microchip component where the ksz ptp irq setup function fails to dispose of a newly created IRQ mapping if the request threaded irq function fails durin...

EUVD-2026-9101

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2...

EUVD-2026-9102

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

CVE-2026-3010

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

CVE-2026-3010

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

CVE-2026-3010 TimePictra Stored Cross-Site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

CVE-2026-3010

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

CVE-2026-3010 TimePictra Stored Cross-Site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

PT-2026-22466

Name of the Vulnerable Software and Affected Versions Microchip TimePictra versions 11.0 through 11.3 SP2 Description A missing authentication check for a critical function exists in Microchip TimePictra, potentially allowing for configuration and environment manipulation. Recommendations Version...

Microchip TimePictra security vulnerability

Microchip TimePictra is a synchronization network management software developed by the American company Microchip. Versions of Microchip TimePictra 11.3 SP2 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the lack of authentication for critical functions, which...