https://vulnogram.org/ Most recent CVEs assigned by Microchip Technology (microchip). https://vulnogram.org/seaview/icons/microchip.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-89172 https://vulnogram.org/CVE-2026-89172 Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6. Medium Sat, 12 Sep 2026 09:26:05 GMT https://vulnogram.org/CVE-2026-18349 https://vulnogram.org/CVE-2026-18349 Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4. High Mon, 24 Aug 2026 16:07:45 GMT https://vulnogram.org/CVE-2026-12620 https://vulnogram.org/CVE-2026-12620 The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. Medium Fri, 19 Jun 2026 15:59:07 GMT https://vulnogram.org/CVE-2026-12621 https://vulnogram.org/CVE-2026-12621 Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0. Medium Fri, 19 Jun 2026 15:53:38 GMT https://vulnogram.org/CVE-2026-12622 https://vulnogram.org/CVE-2026-12622 The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. Medium Fri, 19 Jun 2026 15:48:02 GMT https://vulnogram.org/CVE-2026-12619 https://vulnogram.org/CVE-2026-12619 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. Medium Fri, 19 Jun 2026 15:40:50 GMT https://vulnogram.org/CVE-2026-2336 https://vulnogram.org/CVE-2026-2336 A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax_auth session cookie and forge a new cookie with administrative privileges.This iss… High Thu, 16 Apr 2026 17:02:06 GMT https://vulnogram.org/CVE-2025-9497 https://vulnogram.org/CVE-2025-9497 Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0. Critical Network Exploitable Sat, 28 Mar 2026 10:58:29 GMT https://vulnogram.org/CVE-2026-3010 https://vulnogram.org/CVE-2026-3010 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2. Critical Network Exploitable Sat, 28 Feb 2026 11:45:30 GMT https://vulnogram.org/CVE-2026-2844 https://vulnogram.org/CVE-2026-2844 Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2. Critical Network Exploitable Sat, 28 Feb 2026 11:44:07 GMT https://vulnogram.org/CVE-2025-47904 https://vulnogram.org/CVE-2025-47904 Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5. Medium Tue, 24 Feb 2026 15:34:20 GMT https://vulnogram.org/CVE-2025-47902 https://vulnogram.org/CVE-2025-47902 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5. High Mon, 20 Oct 2025 17:52:52 GMT https://vulnogram.org/CVE-2025-47901 https://vulnogram.org/CVE-2025-47901 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5. High Mon, 20 Oct 2025 17:48:20 GMT https://vulnogram.org/CVE-2025-47900 https://vulnogram.org/CVE-2025-47900 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5. High Mon, 20 Oct 2025 17:43:33 GMT https://vulnogram.org/CVE-2024-29155 https://vulnogram.org/CVE-2024-29155 On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real… Medium Wed, 16 Oct 2024 15:51:11 GMT https://vulnogram.org/CVE-2024-43683 https://vulnogram.org/CVE-2024-43683 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0. High Network Exploitable Fri, 04 Oct 2024 19:56:15 GMT https://vulnogram.org/CVE-2024-43684 https://vulnogram.org/CVE-2024-43684 Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0. High Network Exploitable Fri, 04 Oct 2024 19:51:51 GMT https://vulnogram.org/CVE-2024-43685 https://vulnogram.org/CVE-2024-43685 Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 before 2.4.7. High Network Exploitable Fri, 04 Oct 2024 19:48:53 GMT https://vulnogram.org/CVE-2024-43686 https://vulnogram.org/CVE-2024-43686 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) allows Reflected XSS.This issue affects TimeProvider 4100: from 1.0 before 2.4.7. Medium Fri, 04 Oct 2024 19:47:06 GMT https://vulnogram.org/CVE-2024-9054 https://vulnogram.org/CVE-2024-9054 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This… High Fri, 04 Oct 2024 19:42:44 GMT https://vulnogram.org/CVE-2024-43687 https://vulnogram.org/CVE-2024-43687 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0 before 2… High Fri, 04 Oct 2024 19:41:15 GMT https://vulnogram.org/CVE-2024-7801 https://vulnogram.org/CVE-2024-7801 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7. Medium Network Exploitable Fri, 04 Oct 2024 19:38:08 GMT https://vulnogram.org/CVE-2024-7490 https://vulnogram.org/CVE-2024-7490 Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program… Critical Network Exploitable Unsupported When Assigned Thu, 08 Aug 2024 15:01:09 GMT https://vulnogram.org/CVE-2024-30212 https://vulnogram.org/CVE-2024-30212 If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned to the user. If the block count is increased, the fu… High Tue, 28 May 2024 16:07:52 GMT https://vulnogram.org/CVE-2024-4760 https://vulnogram.org/CVE-2024-4760 A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set. Medium Thu, 16 May 2024 13:07:57 GMT