CVE-2025-47904CWE-494

Unsigned upgrade package

Medium · published February 24, 2026

CVSS v4.0
5.7
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.

The record
Technical detail
CVSS v4.0
5.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:L/SA:L
EPSS
0.00096 · 0.7th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2026-02-24T15:34Z
EPSS history
Timeline
  • 24 FEB 15:34Z
    Unsigned upgrade package
    cvelistv5