Remote code Execution inTimeProvider® 4100

published 2024-10-04 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-49694

cvss: 8.8; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 15.6%; EPSS 15.6% chance of exploitation in 30 days, percentile 96%
public exploits: 1; Exploit-DB

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

Patch / fix

fixed in 2

Microchip TimeProvider 4100 2.4.7
microchip timeprovider_4100_firmware 2.4.7

Timeline

2024-10-04 Published
2025-04-04 First public exploit (EDB-52119)

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 y ago (2024-10-04)

Exploit prediction

15.63% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-52119 Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection remote, 2025-04-04
gruppotim.it https://www.gruppotim.it/it/footer/red-team.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	4.0	8.5	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:M/U:Amber
CNA	4.0	8.5	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Amber
NVD	3.1	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Microchip TimeProvider 4100
microchip timeprovider_4100_firmware

Classification

Weakness

CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

gruppotim.it /it/footer/red-team.html
third-party-advisory, exploit
microchip.com /en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timep
vendor-advisory

Sources

CVE List CVE-2024-9054
NVD CVE-2024-9054

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary