CVE-2024-43686: Reflected XSS in TimeProvider 4100 chart component
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) allows Reflected XSS.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43686?
CVE-2024-43686 has a high severity rating due to its potential for reflected cross-site scripting attacks.
How do I fix CVE-2024-43686?
To fix CVE-2024-43686, upgrade the Microchip TimeProvider 4100 firmware to version 2.4.7 or later.
What type of vulnerability is CVE-2024-43686?
CVE-2024-43686 is classified as an improper neutralization of input vulnerability, specifically for reflected XSS.
Which versions of Microchip TimeProvider 4100 are affected by CVE-2024-43686?
CVE-2024-43686 affects all versions of Microchip TimeProvider 4100 from 1.0 before version 2.4.7.
What are the risks associated with CVE-2024-43686?
The risks associated with CVE-2024-43686 include unauthorized access, data theft, and the execution of malicious scripts in the context of the user’s session.