VULNERABILITY INTELLIGENCE
CVE-2025-9497
CVSS score9.8 CRITICAL
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-03-28
Last modified2026-08-12
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0.
Weakness classification
- dc3f6da9-85b5-4a73-84a2-2ec90b40fca5: CWE-798
Primary references
- dc3f6da9-85b5-4a73-84a2-2ec90b40fca5 — Vendor Advisory, Exploit
- dc3f6da9-85b5-4a73-84a2-2ec90b40fca5 — Vendor Advisory