CVE-2025-47900: RCE on backup configuration password
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Microchip Time Provider 4100to a version that resolves this vulnerability.Fixed in 2.5
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47900?
CVE-2025-47900 is classified as a critical vulnerability due to its potential for OS command injection.
How do I fix CVE-2025-47900?
To remediate CVE-2025-47900, upgrade Microchip Time Provider 4100 to version 2.5 or later.
What are the potential impacts of CVE-2025-47900?
CVE-2025-47900 could allow an attacker to execute arbitrary OS commands on affected systems.
Which versions of Microchip Time Provider 4100 are affected by CVE-2025-47900?
CVE-2025-47900 affects all versions of Microchip Time Provider 4100 prior to 2.5.
Who is responsible for addressing CVE-2025-47900?
The responsibility for addressing CVE-2025-47900 lies with users of affected versions of Microchip Time Provider 4100.