medium6.1

CVE-2024-43683

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvide…

Impact

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0.

Affected products

Vendor	Product	Affected versions
Microchip	Timeprovider 4100 Firmware	from 1.0 before 2.4.7

Weakness classification

CWE-601

References

NVD record
CVE.org record
https://www.gruppotim.it/it/footer/red-team.html
https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timeprovider-4100-grandmaster-improper-verification-of-host-header