CVE-2024-43683: Improper verification of the Host header in TimeProvider 4100

Improper verification of the Host header in TimeProvider 4100

Status

Published

2024-10-04

Updated

2024-11-01

Assigning organization

Microchip

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microchip TimeProvider 4100

Default version status: unknown

1.0 to < 2.4.7affected

References

https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timeprovider-4100-grandmaster-improper-verification-of-host-header ↗
https://www.gruppotim.it/it/footer/red-team.html ↗