CVE-2024-7801: SQL injection in get_chart_data in TimeProvider 4100
Published Oct 4, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.
Affected Software
2 affected components
All of the following
Microchip Timeprovider 4100 Firmware>=1.0<2.4.7
Microchip TimeProvider 4100
Event History
Oct 4, 2024
CVE Published
via MITRE·07:38 PM
Data Sourced
via MITRE·07:38 PM
DescriptionWeakness
Apr 5, 2025
Exploit Published
12:00 AM
Known Exploited
05:45 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-7801?
CVE-2024-7801 has a medium severity rating due to its potential for SQL injection attacks.
2
How do I fix CVE-2024-7801?
To fix CVE-2024-7801, upgrade your Microchip TimeProvider 4100 firmware to version 2.4.7 or later.
3
What systems are affected by CVE-2024-7801?
CVE-2024-7801 affects Microchip TimeProvider 4100 firmware versions from 1.0 up to but not including 2.4.7.
4
Can CVE-2024-7801 be exploited remotely?
Yes, CVE-2024-7801 can potentially be exploited remotely if the attacker can interact with the affected SQL interface.
5
What are the consequences of exploiting CVE-2024-7801?
Exploiting CVE-2024-7801 can lead to unauthorized access to sensitive data through SQL injection.