Improper Authentication Vulnerability Allows Session Hijacking in TimeProvider 4100
CVE-2024-43685

8.7HIGH

Key Information:

Vendor

Microchip

Status
Timeprovider 4100
Vendor
CVE Published:
4 October 2024

What is CVE-2024-43685?

An improper authentication vulnerability exists in Microchip TimeProvider 4100 specifically in the login modules, which can be exploited to facilitate session hijacking. This flaw impacts any version from 1.0 to before version 2.4.7, allowing attackers to potentially leverage active sessions without proper authorization. Users of the TimeProvider 4100 are encouraged to apply necessary patches and follow security best practices to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

TimeProvider 4100 1.0 < 2.4.7

References

https://www.microchip.com/en-us/solutions/technologies/em...
vendor-advisory
https://www.gruppotim.it/it/footer/red-team.html
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

JSON
.