CVE-2024-43684CWE-352CWE-79

Cross-Site Request Forgery vulnerability in TimeProvider 4100

High · published October 4, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:H/R:U/V:C/RE:M/U:Amber
EPSS
0.00207 · 10.3th percentile
Weaknesses
CWE-352 · Cross-Site Request Forgery (CSRF); CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-10-04T19:51Z
EPSS history
Timeline
  • 04 OCT 19:51Z
    Cross-Site Request Forgery vulnerability in TimeProvider 4100
    cvelistv5