Medium severity6.1NVD Advisory· Published Oct 4, 2024· Updated Jun 17, 2026

CVE-2024-43683

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microchip/Timeprovider 4100 Firmware
cpe:2.3:o:microchip:timeprovider_4100_firmware:*:*:*:*:*:*:*:*
Range: >=1.0,<2.4.7
Microchip/TimeProvider 4100 Grandmasterllm-fuzzy
Range: >=1.0
Microchip/Time Provider 4100llm-fuzzy2 versions
>=1.0+ 1 more
- (no CPE)range: >=1.0
- (no CPE)range: 1.0

Patches

Vulnerability mechanics

References

News mentions

No linked articles in our index yet.

Severity

MediumCVSS v3.1

6.1/ 10

CVSS v48.7

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:C/RE:M/U:Amber

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: None

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

Probability of exploitation in the next 30 days.

0.21%

VYPR risk score

Composite of severity, exploitation, and reach.

0.40medium

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Weaknesses

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')

CVE ID

CVE-2024-43683

Credits

AC
Antonio Carriero
finder
AH
Armando Huesca Prida
finder
DR
Davide Renna
finder
ML
Manuel Leone
finder
MN
Marco Negro
finder
MB
Massimiliano Brolli
finder
VP
Vito Pistillo
finder
TS
TIM Security Red Team Research
reporter