CVE-2024-9054: Remote code Execution inTimeProvider® 4100

Q: What is the severity of CVE-2024-9054?

CVE-2024-9054 is classified as a high-severity vulnerability due to its potential for OS Command Injection.

Q: How do I fix CVE-2024-9054?

To fix CVE-2024-9054, update the Microchip TimeProvider 4100 firmware to version 2.4.7 or later.

Q: What systems are affected by CVE-2024-9054?

CVE-2024-9054 affects the Microchip TimeProvider 4100 firmware versions between 1.0 and 2.4.7.

Q: What type of vulnerability is CVE-2024-9054?

CVE-2024-9054 is an OS Command Injection vulnerability that allows unauthorized command execution.

Q: Does CVE-2024-9054 expose sensitive information?

Yes, CVE-2024-9054 can lead to the exposure of sensitive information to unauthorized actors.

Published Oct 4, 2024

Updated

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

Affected Software

2 affected components

All of the following

Microchip Timeprovider 4100 Firmware>=1.0<2.4.7

Microchip TimeProvider 4100

Event History

Oct 4, 2024

CVE Published

via MITRE·07:42 PM

Data Sourced

via MITRE·07:42 PM

DescriptionWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Apr 4, 2025

Exploit Published

12:00 AM

Known Exploited

05:51 AM

Frequently Asked Questions

What is the severity of CVE-2024-9054?

CVE-2024-9054 is classified as a high-severity vulnerability due to its potential for OS Command Injection.

How do I fix CVE-2024-9054?

To fix CVE-2024-9054, update the Microchip TimeProvider 4100 firmware to version 2.4.7 or later.

What systems are affected by CVE-2024-9054?