T4
Product
Timeprovider 4100 Firmware
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 5Low 0
Watch
Add Timeprovider 4100 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9497 | 9.8 | Mar 28 | Hardcoded Upgrade Decryption Passwords Affected: before 2.5.0 |
| CVE-2024-43685 | 9.8 | Oct 4 | Session token fixation in TimeProvider 4100 Affected: 1.0 before 2.4.7 |
| CVE-2025-47902 | 8.8 | Oct 20 | SQL Injection in web resource Affected: before 2.5 |
| CVE-2025-47901 | 8.8 | Oct 20 | RCE on restore configuration password Affected: before 2.5 |
| CVE-2025-47900 | 8.8 | Oct 20 | RCE on backup configuration password Affected: before 2.5 |
| CVE-2024-43684 | 8.8 | Oct 4 | Cross-Site Request Forgery vulnerability in TimeProvider 4100 Affected: 1.0 before 2.4.7 |
| CVE-2024-9054 | 8.8 | Oct 4 | Remote code Execution inTimeProvider® 4100 Affected: 1.0 before 2.4.7 |
| CVE-2024-7801 | 6.5 | Oct 4 | SQL injection in get_chart_data in TimeProvider 4100 Affected: 1.0 before 2.4.7 |
| CVE-2024-43683 | 6.1 | Oct 4 | Improper verification of the Host header in TimeProvider 4100 Affected: 1.0 before 2.4.7 |
| CVE-2024-43686 | 6.1 | Oct 4 | Reflected XSS in TimeProvider 4100 chart component Affected: 1.0 before 2.4.7 |
| CVE-2024-43687 | 6.1 | Oct 4 | XSS vulnerability in bannerconfig endpoint in TimeProvider 4100 Affected: 1.0 before 2.4.7 |
| CVE-2025-47904 | 4.1 | Feb 24 | Unsigned upgrade package Affected: before 2.5 |
Showing 12