Microchip - vulnerabilities (CVEs)

60 CVEs in 231 products, 0 in the last 30 days, newest from 2026-09-12.

Products

• Timeprovider 4100 Firmware - 12 CVEs
• Rn4870 Firmware - 8 CVEs
• Syncserver S100 Firmware - 7 CVEs
• Syncserver S200 Firmware - 7 CVEs
• Syncserver S250 Firmware - 7 CVEs
• Syncserver S300 Firmware - 7 CVEs
• Syncserver S350 Firmware - 7 CVEs
• Timeprovider 4100 - 7 CVEs
• Bm70 Firmware - 5 CVEs
• Bm71 Firmware - 5 CVEs
• Bm78 Firmware - 5 CVEs
• Bm83 Firmware - 5 CVEs
• Pic Lightblue Explorer Demo Firmware - 5 CVEs
• Rn4871 Firmware - 5 CVEs
• Time Provider 4100 - 5 CVEs
• Gridtime 3000 - 4 CVEs
• Gridtime 3000 Firmware - 4 CVEs
• Is1870 Firmware - 4 CVEs
• Is1871 Firmware - 4 CVEs
• Atsama5d21c-cu Firmware - 3 CVEs
• Atsama5d21c-cur Firmware - 3 CVEs
• Atsama5d225c-d1m-cur Firmware - 3 CVEs
• Atsama5d22c-cn Firmware - 3 CVEs
• Atsama5d22c-cnr Firmware - 3 CVEs
• Atsama5d22c-cu Firmware - 3 CVEs
• Atsama5d22c-cur Firmware - 3 CVEs
• Atsama5d23c-cn Firmware - 3 CVEs
• Atsama5d23c-cnr Firmware - 3 CVEs
• Atsama5d23c-cu Firmware - 3 CVEs
• Atsama5d23c-cur Firmware - 3 CVEs
• Atsama5d24c-cu Firmware - 3 CVEs
• Atsama5d24c-cuf Firmware - 3 CVEs
• Atsama5d24c-cur Firmware - 3 CVEs
• Atsama5d26c-cn Firmware - 3 CVEs
• Atsama5d26c-cnr Firmware - 3 CVEs
• Atsama5d26c-cu Firmware - 3 CVEs
• Atsama5d26c-cur Firmware - 3 CVEs
• Atsama5d27-som1 Firmware - 3 CVEs
• Atsama5d27-wlsom1 Firmware - 3 CVEs
• Atsama5d27c-cn Firmware - 3 CVEs
• Atsama5d27c-cnr Firmware - 3 CVEs
• Atsama5d27c-cnrvao Firmware - 3 CVEs
• Atsama5d27c-cnvao Firmware - 3 CVEs
• Atsama5d27c-cu Firmware - 3 CVEs
• Atsama5d27c-cur Firmware - 3 CVEs
• Atsama5d27c-d1g-cu Firmware - 3 CVEs
• Atsama5d27c-d1g-cur Firmware - 3 CVEs
• Atsama5d27c-d5m-cu Firmware - 3 CVEs
• Atsama5d27c-d5m-cur Firmware - 3 CVEs
• Atsama5d27c-ld1g-cu Firmware - 3 CVEs
• Atsama5d27c-ld1g-cur Firmware - 3 CVEs
• Atsama5d27c-ld2g-cu Firmware - 3 CVEs
• Atsama5d27c-ld2g-cur Firmware - 3 CVEs
• Atsama5d28c-cn Firmware - 3 CVEs
• Atsama5d28c-cnr Firmware - 3 CVEs
• Atsama5d28c-cu Firmware - 3 CVEs
• Atsama5d28c-cur Firmware - 3 CVEs
• Atsama5d28c-d1g-cu Firmware - 3 CVEs
• Atsama5d28c-d1g-cur Firmware - 3 CVEs
• Atsama5d28c-ld1g-cu Firmware - 3 CVEs
• Atsama5d28c-ld1g-cur Firmware - 3 CVEs
• Atsama5d28c-ld2g-cu Firmware - 3 CVEs
• Atsama5d28c-ld2g-cur Firmware - 3 CVEs
• Atsama5d31a-cfu Firmware - 3 CVEs
• Atsama5d31a-cfur Firmware - 3 CVEs
• Atsama5d31a-cu Firmware - 3 CVEs
• Atsama5d31a-cur Firmware - 3 CVEs
• Atsama5d33a-cu Firmware - 3 CVEs
• Atsama5d33a-cur Firmware - 3 CVEs
• Atsama5d34a-cu Firmware - 3 CVEs
• Atsama5d34a-cur Firmware - 3 CVEs
• Atsama5d35a-cn Firmware - 3 CVEs
• Atsama5d35a-cnr Firmware - 3 CVEs
• Atsama5d35a-cu Firmware - 3 CVEs
• Atsama5d35a-cur Firmware - 3 CVEs
• Atsama5d36a-cn Firmware - 3 CVEs
• Atsama5d36a-cnr Firmware - 3 CVEs
• Atsama5d36a-cu Firmware - 3 CVEs
• Atsama5d36a-cur Firmware - 3 CVEs
• Atsama5d41a-cu Firmware - 3 CVEs
• Atsama5d41a-cur Firmware - 3 CVEs
• Atsama5d41b-cu Firmware - 3 CVEs
• Atsama5d41b-cur Firmware - 3 CVEs
• Atsama5d42a-cu Firmware - 3 CVEs
• Atsama5d42a-cur Firmware - 3 CVEs
• Atsama5d42b-cu Firmware - 3 CVEs
• Atsama5d42b-cur Firmware - 3 CVEs
• Atsama5d43a-cu Firmware - 3 CVEs
• Atsama5d43a-cur Firmware - 3 CVEs
• Atsama5d43b-cu Firmware - 3 CVEs
• Atsama5d43b-cur Firmware - 3 CVEs
• Atsama5d44a-cu Firmware - 3 CVEs
• Atsama5d44a-cur Firmware - 3 CVEs
• Atsama5d44b-cu Firmware - 3 CVEs
• Atsama5d44b-cur Firmware - 3 CVEs
• Maxview Storage Manager - 3 CVEs
• Bm64 Firmware - 2 CVEs
• Bm77 Firmware - 2 CVEs
• Cryptoauthlib - 2 CVEs
• Miwi - 2 CVEs
• Mplab Harmony - 2 CVEs
• Mplab Ide - 2 CVEs
• Pic32cx1012bz25048 Firmware - 2 CVEs
• Rn4678 Firmware - 2 CVEs
• Timepictra - 2 CVEs
• Wbz451 Firmware - 2 CVEs
• Advanced Software Framework - 1 CVEs
• Advanced Software Framework 4 - 1 CVEs
• An1044 - 1 CVEs
• An953 - 1 CVEs
• Atmel Toolbox - 1 CVEs
• Atmsamb11 Blusdk Smart - 1 CVEs
• Dt100112 Firmware - 1 CVEs
• Istax - 1 CVEs
• Microchip Libraries For Applications - 1 CVEs
• Mplab Harmony 3 Core Module - 1 CVEs
• Mplab Network Creator - 1 CVEs
• Rn4870 - 1 CVEs
• Sam3n - 1 CVEs
• Sam3s - 1 CVEs
• Sam3u - 1 CVEs
• Sam4c - 1 CVEs
• Sam4e - 1 CVEs
• Sam4n - 1 CVEs
• Sam4s - 1 CVEs
• Sama5d4 - 1 CVEs
• Same70 - 1 CVEs
• Samg55 - 1 CVEs
• Sams70 - 1 CVEs
• Samv70 - 1 CVEs
• Samv71 - 1 CVEs
• Sw300052 - 1 CVEs
• Syncserver S650 Firmware - 1 CVEs
• Atsama5d21c-cu - 0 CVEs
• Atsama5d21c-cur - 0 CVEs
• Atsama5d225c-d1m-cur - 0 CVEs
• Atsama5d22c-cn - 0 CVEs
• Atsama5d22c-cnr - 0 CVEs
• Atsama5d22c-cu - 0 CVEs
• Atsama5d22c-cur - 0 CVEs
• Atsama5d23c-cn - 0 CVEs
• Atsama5d23c-cnr - 0 CVEs
• Atsama5d23c-cu - 0 CVEs
• Atsama5d23c-cur - 0 CVEs
• Atsama5d24c-cu - 0 CVEs
• Atsama5d24c-cuf - 0 CVEs
• Atsama5d24c-cur - 0 CVEs
• Atsama5d26c-cn - 0 CVEs
• Atsama5d26c-cnr - 0 CVEs
• Atsama5d26c-cu - 0 CVEs
• Atsama5d26c-cur - 0 CVEs
• Atsama5d27-som1 - 0 CVEs
• Atsama5d27-wlsom1 - 0 CVEs
• Atsama5d27c-cn - 0 CVEs
• Atsama5d27c-cnr - 0 CVEs
• Atsama5d27c-cnrvao - 0 CVEs
• Atsama5d27c-cnvao - 0 CVEs
• Atsama5d27c-cu - 0 CVEs
• Atsama5d27c-cur - 0 CVEs
• Atsama5d27c-d1g-cu - 0 CVEs
• Atsama5d27c-d1g-cur - 0 CVEs
• Atsama5d27c-d5m-cu - 0 CVEs
• Atsama5d27c-d5m-cur - 0 CVEs
• Atsama5d27c-ld1g-cu - 0 CVEs
• Atsama5d27c-ld1g-cur - 0 CVEs
• Atsama5d27c-ld2g-cu - 0 CVEs
• Atsama5d27c-ld2g-cur - 0 CVEs
• Atsama5d28c-cn - 0 CVEs
• Atsama5d28c-cnr - 0 CVEs
• Atsama5d28c-cu - 0 CVEs
• Atsama5d28c-cur - 0 CVEs
• Atsama5d28c-d1g-cu - 0 CVEs
• Atsama5d28c-d1g-cur - 0 CVEs
• Atsama5d28c-ld1g-cu - 0 CVEs
• Atsama5d28c-ld1g-cur - 0 CVEs
• Atsama5d28c-ld2g-cu - 0 CVEs
• Atsama5d28c-ld2g-cur - 0 CVEs
• Atsama5d31a-cfu - 0 CVEs
• Atsama5d31a-cfur - 0 CVEs
• Atsama5d31a-cu - 0 CVEs
• Atsama5d31a-cur - 0 CVEs
• Atsama5d33a-cu - 0 CVEs
• Atsama5d33a-cur - 0 CVEs
• Atsama5d34a-cu - 0 CVEs
• Atsama5d34a-cur - 0 CVEs
• Atsama5d35a-cn - 0 CVEs
• Atsama5d35a-cnr - 0 CVEs
• Atsama5d35a-cu - 0 CVEs
• Atsama5d35a-cur - 0 CVEs
• Atsama5d36a-cn - 0 CVEs
• Atsama5d36a-cnr - 0 CVEs
• Atsama5d36a-cu - 0 CVEs
• Atsama5d36a-cur - 0 CVEs
• Atsama5d41a-cu - 0 CVEs
• Atsama5d41a-cur - 0 CVEs
• Atsama5d41b-cu - 0 CVEs
• Atsama5d41b-cur - 0 CVEs
• Atsama5d42a-cu - 0 CVEs
• Atsama5d42a-cur - 0 CVEs
• Atsama5d42b-cu - 0 CVEs
• Atsama5d42b-cur - 0 CVEs
• Atsama5d43a-cu - 0 CVEs
• Atsama5d43a-cur - 0 CVEs
• Atsama5d43b-cu - 0 CVEs
• Atsama5d43b-cur - 0 CVEs
• Atsama5d44a-cu - 0 CVEs
• Atsama5d44a-cur - 0 CVEs
• Atsama5d44b-cu - 0 CVEs
• Atsama5d44b-cur - 0 CVEs
• Atsamb11 - 0 CVEs
• Bm64 - 0 CVEs
• Bm70 - 0 CVEs
• Bm71 - 0 CVEs
• Bm77 - 0 CVEs
• Bm78 - 0 CVEs
• Bm83 - 0 CVEs
• Dt100112 - 0 CVEs
• Is1870 - 0 CVEs
• Is1871 - 0 CVEs
• Microchip - 0 CVEs
• Pic32cx1012bz25048 - 0 CVEs
• Pic Lightblue Explorer Demo - 0 CVEs
• Rn4678 - 0 CVEs
• Rn4871 - 0 CVEs
• Syncserver S100 - 0 CVEs
• Syncserver S200 - 0 CVEs
• Syncserver S250 - 0 CVEs
• Syncserver S300 - 0 CVEs
• Syncserver S350 - 0 CVEs
• Syncserver S650 - 0 CVEs
• Wbz451 - 0 CVEs

Newest CVEs of Microchip

• CVE-2026-89172 - CVSS 5.6 (medium), 2026-09-12: Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through…
• CVE-2026-18349 - CVSS 7.3 (high), 2026-08-24: Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4.
• CVE-2026-12620 - CVSS 6.5 (medium), 2026-06-19: The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through…
• CVE-2026-12621 - CVSS 5.4 (medium), 2026-06-19: Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects…
• CVE-2026-12622 - CVSS 5.4 (medium), 2026-06-19: The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03…
• CVE-2026-12619 - CVSS 5.4 (medium), 2026-06-19: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site…
• CVE-2026-2336 - CVSS 8.8 (high), 2026-04-16: A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their…
• CVE-2025-9497 - CVSS 9.8 (critical), 2026-03-28: Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100:…
• CVE-2026-3010 - CVSS 9.3 (critical), 2026-02-28: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for…
• CVE-2026-2844 - CVSS 9.3 (critical), 2026-02-28: Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects…
• CVE-2025-47904 - CVSS 5.7 (medium), 2026-02-24: Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time…
• CVE-2025-47901 - CVSS 8.9 (high), 2025-10-20: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command…
• CVE-2025-47900 - CVSS 8.9 (high), 2025-10-20: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command…
• CVE-2025-47902 - CVSS 8.8 (high), 2025-10-20: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This…
• CVE-2024-29155 - CVSS 4.3 (medium), 2024-10-16: On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing…
• CVE-2024-9054 - CVSS 8.8 (high), 2024-10-04: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor…
• CVE-2024-7801 - CVSS 6.5 (medium), 2024-10-04: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows…
• CVE-2024-43687 - CVSS 7.7 (high), 2024-10-04: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config…
• CVE-2024-43683 - CVSS 8.7 (high), 2024-10-04: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects…
• CVE-2024-43686 - CVSS 6.1 (medium), 2024-10-04: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules)…
• CVE-2024-43685 - CVSS 9.8 (critical), 2024-10-04: Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0…
• CVE-2024-43684 - CVSS 8.8 (high), 2024-10-04: Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue…
• CVE-2024-7490 - CVSS 9.8 (critical), 2024-08-08: Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a…
• CVE-2024-30212 - CVSS 7 (high), 2024-05-28: If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of…
• CVE-2024-4760 - CVSS 6.3 (medium), 2024-05-16: A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U…
• CVE-2023-51438 - CVSS 10 (critical), 2024-01-09: A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions…
• CVE-2024-22216 - CVSS 10 (critical), 2024-01-08: In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system…
• CVE-2020-27636 - CVSS 9.1 (critical), 2023-10-10: In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random.
• CVE-2023-23588 - CVSS 6.3 (medium), 2023-04-11: A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager < 4.09.00.25611 on…
• CVE-2022-40022 - CVSS 9.8 (critical), 2023-02-13: Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.