VULNERABILITY INTELLIGENCE

CVE-2024-7801

CVSS score6.5 MEDIUM

EPSS probability0.84%

CISA KEVNot currently listed

Published2024-10-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

Weakness classification

dc3f6da9-85b5-4a73-84a2-2ec90b40fca5: CWE-89
nvd@nist.gov: CWE-89

Primary references

dc3f6da9-85b5-4a73-84a2-2ec90b40fca5 — Exploit, Third Party Advisory
dc3f6da9-85b5-4a73-84a2-2ec90b40fca5 — Vendor Advisory