CveMateVulnerability intelligence

Microchip vulnerabilities, page 2

60 vulnerabilities

Known vulnerabilities in Microchip products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 130 products.

CVE-2022-40022microchipsyncserver_s650_firmware3y ago13-02-2023 00:00

Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.CVE-2022-40480microchipdt100112_firmware+13y ago07-02-2023 00:00

Nordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue which allows attackers to cause a Denial of Service (DoS) via a crafted ConReq packet.CVE-2022-46401microchipbm64_firmware+113y ago19-12-2022 00:00

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.CVE-2022-46403microchipbm70_firmware+83y ago19-12-2022 00:00

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.CVE-2022-46399microchipbm64_firmware+133y ago19-12-2022 00:00

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.CVE-2022-46402microchipbm70_firmware+83y ago19-12-2022 00:00

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values.CVE-2022-46400microchipbm70_firmware+83y ago19-12-2022 00:00

The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing.CVE-2022-45192microchiprn4870_firmware3y ago07-02-2023 00:00

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request.CVE-2022-45191microchiprn4870_firmware3y ago07-02-2023 00:00

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a pair confirm message with wrong values.CVE-2022-45190microchiprn4870_firmware3y ago07-02-2023 00:00

An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device.CVE-2024-9054microchiptimeprovider_4100_firmware2y ago04-10-2024 19:42

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.CVE-2024-4760microchipsam3n+112y ago16-05-2024 13:07

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.CVE-2024-43687microchiptimeprovider_4100_firmware2y ago04-10-2024 19:41

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0 before 2.4.7.CVE-2024-43686microchiptimeprovider_4100_firmware2y ago04-10-2024 19:47

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) allows Reflected XSS.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.CVE-2024-43683microchiptimeprovider_4100_firmware2y ago04-10-2024 19:56

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0.CVE-2024-43685microchiptimeprovider_4100_firmware2y ago04-10-2024 19:48

Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.CVE-2024-43684microchiptimeprovider_4100_firmware2y ago04-10-2024 19:51

Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0.CVE-2024-7490microchip techologyadvanced software framework+12y ago08-08-2024 15:01

Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow. This vulnerability is associated with program files tinydhcpserver.C and program routines lwip_dhcp_find_option. This issue affects Advanced Software Framework: through 3.52.0.2574. ASF is no longer being supported. Apply provided workaround or migrate to an actively maintained framework.CVE-2024-7801microchiptimeprovider_4100_firmware2y ago04-10-2024 19:38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.CVE-2024-29155microchiprn4870_firmware2y ago16-10-2024 15:51

On Microchip RN4870 devices, when more than one consecutive PairReqNoInputNoOutput request is received, the device becomes incapable of completing the pairing process. A third party can inject a second PairReqNoInputNoOutput request just after a real one, causing the pair request to be blocked.