Microchip TimeProvider 4100 Vulnerable to XSS Attacks
CVE-2024-43687

6.1MEDIUM

Key Information:

Vendor: Microchip
Status: Timeprovider 4100 Firmware
Vendor: CVE Published:; 4 October 2024

What is CVE-2024-43687?

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

References

https://www.microchip.com/en-us/solutions/technologies/em...

https://www.gruppotim.it/it/footer/red-team.html

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Oct 4, 2024