CVE Program partner

Microchip

Microchip Technology

API
CVEs, 365 days1425 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationMicrochip Technology
RoleCNA
TypeVendor
Reports tomitre
ScopeMicrochip Technology products only.
Advisorieshttps://microchip.com/psirt

Latest CVEs · RSS

  • CVE-2026-89172 2026-09-12 · CVSS 5.6
    Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A;
  • CVE-2026-18349 2026-08-24 · CVSS 7.3
    Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4.
  • CVE-2026-12620 2026-06-19 · CVSS 4.6
    The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r
  • CVE-2026-12621 2026-06-19 · CVSS 5.3
    Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTi
  • CVE-2026-12622 2026-06-19 · CVSS 5.3
    The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 t
  • CVE-2026-12619 2026-06-19 · CVSS 5.1
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting
  • CVE-2026-2336 2026-04-16 · CVSS 8.7
    A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own
  • CVE-2025-9497 2026-03-28 · CVSS 5.5
    Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: befor
  • CVE-2026-3010 2026-02-28 · CVSS 9.3
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Inform
  • CVE-2026-2844 2026-02-28 · CVSS 9.3
    Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra:
  • CVE-2025-47904 2026-02-24 · CVSS 5.7
    Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider
  • CVE-2025-47902 2025-10-20 · CVSS 7.1
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This iss
  • CVE-2025-47901 2025-10-20 · CVSS 8.9
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injec
  • CVE-2025-47900 2025-10-20 · CVSS 8.9
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injec
  • CVE-2024-29155 2024-10-16 · CVSS 4.3
    On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing
  • CVE-2024-43683 2024-10-04 · CVSS 8.7
    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider
  • CVE-2024-43684 2024-10-04 · CVSS 8.7
    Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects
  • CVE-2024-43685 2024-10-04 · CVSS 8.7
    Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 bef
  • CVE-2024-43686 2024-10-04 · CVSS 5.4
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) all
  • CVE-2024-9054 2024-10-04 · CVSS 8.5
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerabi
  • CVE-2024-43687 2024-10-04 · CVSS 7.7
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules)
  • CVE-2024-7801 2024-10-04 · CVSS 6.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL
  • CVE-2024-7490 2024-08-08 · CVSS 9.5
    Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer
  • CVE-2024-30212 2024-05-28 · CVSS 7.0
    If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of
  • CVE-2024-4760 2024-05-16 · CVSS 6.3
    A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows

All CVE Program partners