Microchip Gridtime_3000_firmware
4 CVEs affecting Microchip Gridtime_3000_firmware. Latest disclosed: 2026-06-19. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-12620 | Medium | 6.5 | 2026-06-19 | The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1… |
CVE-2026-12622 | Medium | 5.4 | 2026-06-19 | The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03… |
CVE-2026-12621 | Medium | 5.4 | 2026-06-19 | Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridT… |
CVE-2026-12619 | Medium | 5.4 | 2026-06-19 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scriptin… |