İçeriğe atla
Noroxi

Microchip kayıtları

microchip üreticisine ait 56 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %1,8
Pre-auth RCE
4
Düzeltme kaydı olan
%21,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

56 kayıt
  • CVE-2022-40022
    67Bu hafta

    Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.

    KritikCVSS 9,8SilahlaştırılmışEPSS %92

    microchip · syncserver s650 firmware13 Şub 2023

  • CVE-2009-1608
    40Planlayın

    Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrar

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    microchip · mplab ide11 May 2009

  • CVE-2024-22216
    40Planlayın

    In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for

    KritikCVSS 10,0İstismar yokEPSS %1

    microchip · maxview storage manager8 Oca 2024

  • CVE-2024-9054
    39İzleyin

    Remote code Execution inTimeProvider® 4100

    YüksekCVSS 8,5Kavram kanıtıEPSS %16

    microchip · timeprovider 4100 firmware4 Eki 2024

  • CVE-2023-51438
    39İzleyin

    A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC

    KritikCVSS 9,8İstismar yokEPSS %1

    microchip · maxview storage manager9 Oca 2024

  • CVE-2020-17441
    38İzleyin

    An issue was discovered in picoTCP 1.7.0.

    KritikCVSS 9,1İstismar yokEPSS %7

    altran · picotcp11 Ara 2020

  • CVE-2009-1674
    38İzleyin

    Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof path

    KritikCVSS 9,3Kavram kanıtıEPSS %5

    microchip · mplab ide18 May 2009

  • CVE-2024-7490
    38İzleyin

    Remote Code Execution in Advanced Software Framework DHCP server

    KritikCVSS 9,5İstismar yokEPSS %1

    microchip · advanced software framework8 Ağu 2024

  • CVE-2019-16127
    37İzleyin

    Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow.

    KritikCVSS 9,1İstismar yokEPSS %2

    microchip · advanced software framework 422 Eki 2020

  • CVE-2026-2844
    37İzleyin

    TimePictra Authentication Bypass Vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    microchip · timepictra28 Şub 2026

  • CVE-2026-3010
    37İzleyin

    TimePictra Stored Cross-Site Scripting

    KritikCVSS 9,3İstismar yokEPSS %0

    microchip · timepictra28 Şub 2026

  • CVE-2020-27636
    36İzleyin

    In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random.

    KritikCVSS 9,1İstismar yokEPSS %1

    microchip · mplab network creator10 Eki 2023

  • CVE-2025-47900
    35İzleyin

    RCE on backup configuration password

    YüksekCVSS 8,9İstismar yokEPSS %1

    microchip · timeprovider 4100 firmware20 Eki 2025

  • CVE-2025-47901
    35İzleyin

    RCE on restore configuration password

    YüksekCVSS 8,9İstismar yokEPSS %1

    microchip · timeprovider 4100 firmware20 Eki 2025

  • CVE-2022-46403
    34İzleyin

    The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.

    YüksekCVSS 8,6İstismar yokEPSS %1

    microchip · bm78 firmware19 Ara 2022

  • CVE-2024-43685
    34İzleyin

    Session token fixation in TimeProvider 4100

    YüksekCVSS 8,7İstismar yokEPSS %0

    microchip · timeprovider 4100 firmware4 Eki 2024

  • CVE-2026-2336
    34İzleyin

    Weak webstax_auth Cookie Authentication Allows Privilege Escalation

    YüksekCVSS 8,7İstismar yokEPSS %0

    microchip · istax16 Nis 2026

  • CVE-2024-43683
    34İzleyin

    Improper verification of the Host header in TimeProvider 4100

    YüksekCVSS 8,7İstismar yokEPSS %0

    microchip · timeprovider 4100 firmware4 Eki 2024

  • CVE-2024-43684
    34İzleyin

    Cross-Site Request Forgery vulnerability in TimeProvider 4100

    YüksekCVSS 8,7İstismar yokEPSS %0

    microchip · timeprovider 4100 firmware4 Eki 2024

  • CVE-2020-12788
    30İzleyin

    CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.

    YüksekCVSS 7,5İstismar yokEPSS %1

    microchip · atsama5d21c-cu firmware14 Eyl 2020

  • CVE-2021-37605
    30İzleyin

    In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Mes

    YüksekCVSS 7,5İstismar yokEPSS %1

    microchip · miwi5 Ağu 2021

  • CVE-2020-12789
    30İzleyin

    The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets.

    YüksekCVSS 7,5İstismar yokEPSS %1

    microchip · atsama5d21c-cu firmware14 Eyl 2020

  • CVE-2020-12787
    30İzleyin

    Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling.

    YüksekCVSS 7,5İstismar yokEPSS %1

    microchip · atsama5d21c-cu firmware14 Eyl 2020

  • CVE-2021-37604
    30İzleyin

    In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters bein

    YüksekCVSS 7,5İstismar yokEPSS %1

    microchip · miwi5 Ağu 2021

  • CVE-2020-9034
    30İzleyin

    Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to u

    YüksekCVSS 7,5İstismar yokEPSS %1

    microchip · syncserver s100 firmware16 Şub 2020