Unrated severityNVD Advisory· Published Oct 4, 2024· Updated Aug 29, 2025

Remote code Execution inTimeProvider® 4100

CVE-2024-9054

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microchip/Time Provider 4100llm-fuzzy2 versions
>= 1.0, < 2.4.7+ 1 more
- (no CPE)range: >= 1.0, < 2.4.7
- (no CPE)range: 1.0

Patches

Vulnerability mechanics

References

www.gruppotim.it/it/footer/red-team.htmlmitrethird-party-advisory
www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timeprovider-4100-grandmaster-rce-through-configuration-filemitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.012
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000