CVE-2024-43683CWE-601

Improper verification of the Host header in TimeProvider 4100

High · published October 4, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:H/R:U/V:C/RE:M/U:Amber
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-10-04T19:56Z
EPSS history
Timeline
  • 04 OCT 19:56Z
    Improper verification of the Host header in TimeProvider 4100
    cvelistv5