CVE-2025-9497 in Microchip Time Provider 4100
Summary
Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0.
Responsible
Microchip
Reservation
08/26/2025
Disclosure
03/28/2026
Entries
| ID | Vulnerability | CWE | Base | Temp | 0day | Today | Exp | KEV | EPSS | CTI | Cou | CVE |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 354075 | Microchip Time Provider 4100 Software Update hard-coded credentials | 798 | 3.9 | 3.8 | $0-$5k | $0-$5k | Not defined | 0.00005 | 1.22 | Official fix | CVE-2025-9497 |