Back to Database
Status published
High
CVE-2025-47902
SQL Injection in web resource
Vulnerability Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-47902
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Dario Emilio Bertani
- Raffaele Bova
- Andrea Sindoni
- Simone Bossi
- Antonio Carriero
- Marco Manieri
- Vito Pistillo
- Davide Renna
- Manuel Leone
- Massimiliano Brolli
- TIM Security Red Team Research (TIM S.p.A)
References
More from Microchip
View All →CVE-2025-9497
Hardcoded Upgrade Decryption Passwords
Medium
5.5
CVE-2025-47904
Unsigned upgrade package
Medium
5.7
CVE-2025-47901
RCE on restore configuration password
High
8.9
CVE-2025-47900
RCE on backup configuration password
High
8.9
CVE-2024-9054
Remote code Execution inTimeProvider® 4100
High
8.5
Affected Vendor
Microchip
View all reports →Affected Software
Time Provider 4100
Vulnerable Versions:
0
Timeline
Official Publish:
October 20th, 2025
Last Modified:
March 31st, 2026
Added to House:
July 22nd, 2026