Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-43687

XSS vulnerability in bannerconfig endpoint in TimeProvider 4100

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Microchip

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site Scripting (XSS).This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microchip TimeProvider 4100

Default version status: unaffected

  • 1.0 to < 2.4.7affected
  • 2.4.16 to < 2.5affected

References