Medium severity4.1NVD Advisory· Published Feb 24, 2026· Updated Jun 17, 2026

CVE-2025-47904

Description

Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microchip/Timeprovider 4100 Firmware
cpe:2.3:o:microchip:timeprovider_4100_firmware:*:*:*:*:*:*:*:*
Range: <2.5
Microchip/Time Provider 4100llm-fuzzy2 versions
<2.5+ 1 more
- (no CPE)range: <2.5
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

News mentions

No linked articles in our index yet.

Severity

MediumCVSS v3.1

4.1/ 10

CVSS v45.7

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack vector: Local
Complexity: High
Privileges: High
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: High
Availability: None

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS

Probability of exploitation in the next 30 days.

0.08%

VYPR risk score

Composite of severity, exploitation, and reach.

0.27low

cvss	0.267
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Weaknesses

CWE-494
Download of Code Without Integrity Check

CVE ID

CVE-2025-47904

Credits

AS
Andrea Sindoni
finder
AC
Antonio Carriero
finder
DE
Dario Emilio Bertani
finder
DR
Davide Renna
finder
ML
Manuel Leone
finder
MM
Marco Manieri
finder
MB
Massimiliano Brolli
finder
RB
Raffaele Bova
finder
SB
Simone Bossi
finder
VP
Vito Pistillo
finder
TS
TIM Security Red Team Research (TIM S.p.A)
reporter