CVE-2025-47901: RCE on restore configuration password
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Microchip Time Provider 4100to a version that resolves this vulnerability.Fixed in 2.5
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47901?
The severity of CVE-2025-47901 is classified as critical due to its potential for OS command injection.
How do I fix CVE-2025-47901?
To fix CVE-2025-47901, update the Microchip Time Provider 4100 to version 2.5 or later.
What systems are affected by CVE-2025-47901?
CVE-2025-47901 affects Microchip Time Provider 4100 versions prior to 2.5.
What risks are associated with CVE-2025-47901?
The risks associated with CVE-2025-47901 include unauthorized execution of OS commands leading to potential system compromise.
Is there a workaround for CVE-2025-47901?
There are no known workaround solutions for CVE-2025-47901 besides updating to the fixed version.