MI
Vendor
Microchip
321
CVEs
0
On KEV
0
New 30D
Products
T49.8
Timeprovider 4100 Firmware
Microchip
12 CVEs0 on KEV0 new
RF8.6
Rn4870 Firmware
Microchip
8 CVEs0 on KEV0 new
SS7.5
Syncserver S100 Firmware
Microchip
7 CVEs0 on KEV0 new
SS7.5
Syncserver S200 Firmware
Microchip
7 CVEs0 on KEV0 new
SS7.5
Syncserver S250 Firmware
Microchip
7 CVEs0 on KEV0 new
SS7.5
Syncserver S300 Firmware
Microchip
7 CVEs0 on KEV0 new
SS7.5
Syncserver S350 Firmware
Microchip
7 CVEs0 on KEV0 new
BF8.6
Bm70 Firmware
Microchip
5 CVEs0 on KEV0 new
BF8.6
Bm71 Firmware
Microchip
5 CVEs0 on KEV0 new
BF8.6
Bm78 Firmware
Microchip
5 CVEs0 on KEV0 new
BF8.6
Bm83 Firmware
Microchip
5 CVEs0 on KEV0 new
PL8.6
Pic Lightblue Explorer Demo Firmware
Microchip
5 CVEs0 on KEV0 new
RF8.6
Rn4871 Firmware
Microchip
5 CVEs0 on KEV0 new
TP9.8
Time Provider 4100
Microchip
5 CVEs0 on KEV0 new
G36.5
GridTime 3000
Microchip
4 CVEs0 on KEV0 new
G36.5
Gridtime 3000 Firmware
Microchip
4 CVEs0 on KEV0 new
IF8.6
Is1870 Firmware
Microchip
4 CVEs0 on KEV0 new
IF8.6
Is1871 Firmware
Microchip
4 CVEs0 on KEV0 new
AF7.5
Atsama5d21c-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d21c-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d225c-d1m-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d22c-cn Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d22c-cnr Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d22c-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d22c-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d23c-cn Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d23c-cnr Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d23c-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d23c-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d24c-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d24c-cuf Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d24c-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d26c-cn Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d26c-cnr Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d26c-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d26c-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27-som1 Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27-wlsom1 Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-cn Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-cnr Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-cnrvao Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-cnvao Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-d1g-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-d1g-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-d5m-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-d5m-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-ld1g-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-ld1g-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-ld2g-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d27c-ld2g-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d28c-cn Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d28c-cnr Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d28c-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d28c-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d28c-d1g-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d28c-d1g-cur Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d28c-ld1g-cu Firmware
Microchip
3 CVEs0 on KEV0 new
AF7.5
Atsama5d28c-ld1g-cur Firmware
Microchip
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89172 | AN AN953 Microchip | 5.6 | Sep 12 | Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms |
| CVE-2026-18349 | SA SAMA5D4 Microchip | 7.3 | Aug 24 | SAMA5D44 Fault Injection Vulnerability |
| CVE-2026-12620 | G3 GridTime 3000 Microchip | 6.5 | Jun 19 | Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server |
| CVE-2026-12621 | G3 GridTime 3000 Microchip | 5.4 | Jun 19 | Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time Server |
| CVE-2026-12622 | G3 GridTime 3000 Microchip | 5.4 | Jun 19 | Open Redirect Vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time Server |
| CVE-2026-12619 | G3 GridTime 3000 Microchip | 5.4 | Jun 19 | GridTime™ 3000 GNSS Time Server CSRF to XSS |
| CVE-2026-2336 | IS IStaX Microchip | 8.8 | Apr 16 | Weak webstax_auth Cookie Authentication Allows Privilege Escalation |
| CVE-2025-9497 | TP Time Provider 4100 Microchip | 9.8 | Mar 28 | Hardcoded Upgrade Decryption Passwords |
| CVE-2026-3010 | TI TimePictra Microchip | 6.1 | Feb 28 | TimePictra Stored Cross-Site Scripting |
| CVE-2026-2844 | TI TimePictra Microchip | 7.5 | Feb 28 | TimePictra Authentication Bypass Vulnerability |
| CVE-2025-47904 | TP Time Provider 4100 Microchip | 4.1 | Feb 24 | Unsigned upgrade package |
| CVE-2025-47902 | TP Time Provider 4100 Microchip | 8.8 | Oct 20 | SQL Injection in web resource |
| CVE-2025-47901 | TP Time Provider 4100 Microchip | 8.8 | Oct 20 | RCE on restore configuration password |
| CVE-2025-47900 | TP Time Provider 4100 Microchip | 8.8 | Oct 20 | RCE on backup configuration password |
| CVE-2024-9054 | T4 Timeprovider 4100 Firmware Microchip | 8.8 | Oct 4 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip… |
| CVE-2024-7801 | T4 Timeprovider 4100 Firmware Microchip | 6.5 | Oct 4 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This… |
| CVE-2024-43687 | T4 Timeprovider 4100 Firmware Microchip | 6.1 | Oct 4 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (banner config modules) allows Cross-Site… |
| CVE-2024-43686 | T4 Timeprovider 4100 Firmware Microchip | 6.1 | Oct 4 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) allows Reflected… |
| CVE-2024-43685 | T4 Timeprovider 4100 Firmware Microchip | 9.8 | Oct 4 | Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 before 2.4.7 |
| CVE-2024-43684 | T4 Timeprovider 4100 Firmware Microchip | 8.8 | Oct 4 | Cross-Site Request Forgery (CSRF) vulnerability in Microchip TimeProvider 4100 allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects TimeProvider 4100:… |
| CVE-2024-43683 | T4 Timeprovider 4100 Firmware Microchip | 6.1 | Oct 4 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0 |
| CVE-2024-7490 | AS Advanced Software Framework Microchip | 9.8 | Aug 8 | Improper Input Validation vulnerability in Microchip Techology Advanced Software Framework example DHCP server can cause remote code execution through a buffer overflow |
| CVE-2023-51438 | MS Maxview Storage Manager Microchip | 9.8 | Jan 9 | A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions with maxView Storage… |
| CVE-2024-22216 | MS Maxview Storage Manager Microchip | 10.0 | Jan 8 | In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system management, unauthorized… |
| CVE-2020-27636 | MN Mplab Network Creator Microchip | 9.1 | Oct 10 | In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random |
| CVE-2023-23588 | MS Maxview Storage Manager Microchip | 6.3 | Apr 11 | A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC647D… |
| CVE-2022-40022 | SS Syncserver S650 Firmware Microchip | 9.8 | Feb 13 | Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability |
| CVE-2022-45192 | RF Rn4870 Firmware Microchip | 6.5 | Feb 8 | An issue was discovered on Microchip RN4870 1.43 devices |
| CVE-2022-45191 | RF Rn4870 Firmware Microchip | 6.5 | Feb 8 | An issue was discovered on Microchip RN4870 1.43 devices |
| CVE-2022-45190 | RF Rn4870 Firmware Microchip | 5.3 | Feb 8 | An issue was discovered on Microchip RN4870 1.43 devices |
| CVE-2022-40480 | DF Dt100112 Firmware Microchip | 6.5 | Feb 8 | Nordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue which allows attackers to cause a Denial of Service (DoS) via a crafted ConReq… |
| CVE-2022-46403 | BF Bm83 Firmware Microchip | 8.6 | Dec 19 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages |
| CVE-2022-46402 | BF Bm78 Firmware Microchip | 6.5 | Dec 19 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values |
| CVE-2022-46401 | BF Bm78 Firmware Microchip | 5.4 | Dec 19 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete |
| CVE-2022-46400 | BF Bm70 Firmware Microchip | 5.4 | Dec 19 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing |
| CVE-2022-46399 | PL Pic Lightblue Explorer Demo Firmware Microchip | 7.5 | Dec 19 | The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero |
| CVE-2021-37605 | MI Miwi Microchip | 7.5 | Aug 5 | In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes |
| CVE-2021-37604 | MI Miwi Microchip | 7.5 | Aug 5 | In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the… |
| CVE-2020-20950 | ML Microchip Libraries For Applications Microchip | 5.9 | Jan 19 | Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26 |
| CVE-2020-17441 | MH Mplab Harmony Microchip | 9.1 | Dec 11 | An issue was discovered in picoTCP 1.7.0 |
| CVE-2019-16128 | CR Cryptoauthlib Microchip | 6.8 | Oct 22 | Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 1 of 2) |
| CVE-2019-16129 | CR Cryptoauthlib Microchip | 6.8 | Oct 22 | Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 2 of 2) |
| CVE-2019-16127 | AS Advanced Software Framework 4 Microchip | 9.1 | Oct 22 | Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow |
| CVE-2020-12789 | AF Atsama5d27-som1 Firmware Microchip | 7.5 | Sep 14 | The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets |
| CVE-2020-12788 | AF Atsama5d21c-cu Firmware Microchip | 7.5 | Sep 14 | CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks |
| CVE-2020-12787 | AF Atsama5d28c-ld1g-cu Firmware Microchip | 7.5 | Sep 14 | Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling |
| CVE-2020-9033 | SS Syncserver S200 Firmware Microchip | 6.5 | Feb 17 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php |
| CVE-2020-9032 | SS Syncserver S250 Firmware Microchip | 6.5 | Feb 17 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to kernlog.php |
| CVE-2020-9031 | SS Syncserver S350 Firmware Microchip | 6.5 | Feb 17 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemonlog.php |
| CVE-2020-9030 | SS Syncserver S350 Firmware Microchip | 6.5 | Feb 17 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php |
| CVE-2020-9029 | SS Syncserver S100 Firmware Microchip | 6.5 | Feb 17 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php |
| CVE-2020-9028 | SS Syncserver S300 Firmware Microchip | 6.1 | Feb 17 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the "User Creation, Deletion… |
| CVE-2020-9034 | SS Syncserver S200 Firmware Microchip | 7.5 | Feb 17 | Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification,… |
| CVE-2019-19195 | AB Atmsamb11 Blusdk Smart Microchip | 6.5 | Feb 10 | The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not properly restrict link-layer data length on reception,… |
| CVE-2019-15809 | AT Atmel Toolbox Microchip | 4.7 | Oct 3 | Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in ECDSA signature generation |
| CVE-2009-1674 | MI Mplab Ide Microchip | – | May 18 | Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOL_SETTINGS] section in a… |
| CVE-2009-1608 | MI Mplab Ide Microchip | – | May 11 | Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with… |
