CVE-2025-47900: RCE on backup configuration password
Published Oct 20, 2025
·Updated
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5.
Affected Software
3 affected components
Microchip Time Provider 4100<2.5
All of the following
Microchip Timeprovider 4100 Firmware<2.5
Microchip TimeProvider 4100
Event History
Oct 20, 2025
CVE Published
via MITRE·05:43 PM
Data Sourced
via MITRE·05:43 PM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47900?
CVE-2025-47900 is classified as a critical vulnerability due to its potential for OS command injection.
2
How do I fix CVE-2025-47900?
To remediate CVE-2025-47900, upgrade Microchip Time Provider 4100 to version 2.5 or later.
3
What are the potential impacts of CVE-2025-47900?
CVE-2025-47900 could allow an attacker to execute arbitrary OS commands on affected systems.
4
Which versions of Microchip Time Provider 4100 are affected by CVE-2025-47900?
CVE-2025-47900 affects all versions of Microchip Time Provider 4100 prior to 2.5.
5
Who is responsible for addressing CVE-2025-47900?
The responsibility for addressing CVE-2025-47900 lies with users of affected versions of Microchip Time Provider 4100.