Vulnerability in Microchip Time Provider 4100
CVE-2025-47904
Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.
EPSS: 0.000 (0.2th percentile) — read the EPSS interpretation.
Affected products
- Microchip Time Provider 4100 — versions 0
Weakness classification (CWE)
References
- www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-… (vendor-advisory)
- www.gruppotim.it/en/footer/TIM-red-team.html (technical-description)