CVE-2024-43683

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0.

Score

CVSS 4.0 8.7 High

Status

Modified - dc3f6da9-85b5-4a73-84a2-2ec90b40fca5

Published

2024-10-04

Last modified

2024-11-01

Weaknesses

CWE-601

Affected products

• Timeprovider 4100 (Microchip)
• Timeprovider 4100 Firmware (Microchip)

References

• https://www.gruppotim.it/it/footer/red-team.html
• https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulne…