VULNERABILITY INTELLIGENCE

CVE-2024-9054

CVSS score8.8 HIGH
EPSS probability15.63%
CISA KEVNot currently listed
Published2024-10-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

Weakness classification

  • dc3f6da9-85b5-4a73-84a2-2ec90b40fca5: CWE-78
  • nvd@nist.gov: CWE-78

Primary references