Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Microchip — Vulnerabilities & Security Advisories 24

Browse all 24 CVE security advisories affecting Microchip. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Microchip develops embedded systems and microcontrollers for industrial, automotive, and consumer applications. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and insecure default configurations. Security researchers have identified authentication bypass issues and buffer overruns in various firmware versions. While no major public incidents have been widely reported, the 18 documented CVEs highlight ongoing security concerns in their embedded products, particularly in legacy devices where patching may be challenging. Their security posture reflects common embedded system vulnerabilities, emphasizing the need for robust firmware updates and secure coding practices in IoT and industrial control environments.

CVE ID Title CVSS Severity Published
CVE-2026-89172 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms — AN1044 CWE-1300 5.6 Medium 2026-09-12
CVE-2026-18349 SAMA5D44 Fault Injection Vulnerability — SAMA5D4 CWE-1247 7.3 High 2026-08-24
CVE-2026-12620 Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server — GridTime 3000 CWE-200 - - 2026-06-19
CVE-2026-12621 Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time Server — GridTime 3000 CWE-79 - - 2026-06-19
CVE-2026-12622 Open Redirect Vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time Server — GridTime 3000 CWE-601 - - 2026-06-19
CVE-2026-12619 GridTime™ 3000 GNSS Time Server CSRF to XSS — GridTime 3000 CWE-79 - - 2026-06-19
CVE-2026-2336 Weak webstax_auth Cookie Authentication Allows Privilege Escalation — IStaX CWE-331 8.8AI High AI 2026-04-16
CVE-2025-9497 Hardcoded Upgrade Decryption Passwords — Time Provider 4100 CWE-798 9.8 - 2026-03-28
CVE-2026-3010 TimePictra Stored Cross-Site Scripting — TimePictra CWE-79 6.1 - 2026-02-28
CVE-2026-2844 TimePictra Authentication Bypass Vulnerability — TimePictra CWE-306 9.1 - 2026-02-28
CVE-2025-47904 Unsigned upgrade package — Time Provider 4100 CWE-494 9.1AI Critical AI 2026-02-24
CVE-2025-47902 SQL Injection in web resource — Time Provider 4100 CWE-89 9.8AI Critical AI 2025-10-20
CVE-2025-47901 RCE on restore configuration password — Time Provider 4100 CWE-78 9.8AI Critical AI 2025-10-20
CVE-2025-47900 RCE on backup configuration password — Time Provider 4100 CWE-78 9.8AI Critical AI 2025-10-20
CVE-2024-29155 Denial of service on Microchip RN4870 devices — RN4870 CWE-239 4.3 Medium 2024-10-16
CVE-2024-43683 Improper verification of the Host header in TimeProvider 4100 — TimeProvider 4100 CWE-601 6.1 - 2024-10-04
CVE-2024-43684 Cross-Site Request Forgery vulnerability in TimeProvider 4100 — TimeProvider 4100 CWE-352 7.1 - 2024-10-04
CVE-2024-43685 Session token fixation in TimeProvider 4100 — TimeProvider 4100 CWE-613 8.8 - 2024-10-04
CVE-2024-43686 Reflected XSS in TimeProvider 4100 chart component — TimeProvider 4100 CWE-79 6.1 - 2024-10-04
CVE-2024-9054 Remote code Execution inTimeProvider® 4100 — TimeProvider 4100 CWE-78 8.8 - 2024-10-04
CVE-2024-43687 XSS vulnerability in bannerconfig endpoint in TimeProvider 4100 — TimeProvider 4100 CWE-79 6.1 - 2024-10-04
CVE-2024-7801 SQL injection in get_chart_data in TimeProvider 4100 — TimeProvider 4100 CWE-89 9.8 - 2024-10-04
CVE-2024-30212 Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command — MPLAB® Harmony 3 Core Module CWE-190 7.3AI High AI 2024-05-28
CVE-2024-4760 Voltage glitch during startup of the EEFC NVM controller can bypass the security bit — SAME70 CWE-1247 6.3 Medium 2024-05-16

This page lists every published CVE security advisory associated with Microchip. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.