Vulnerability in Microchip Time Provider 4100
CVE-2025-9497
Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0.
EPSS: 0.000 (2.8th percentile) — read the EPSS interpretation.
Affected products
- Microchip Time Provider 4100 — versions 0
Weakness classification (CWE)
References
- www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-… (vendor-advisory)
- www.gruppotim.it/en/footer/TIM-red-team.html (technical-description)