Microchip Vulnerabilities and Affected Products
Vulnerabilities associated with GridTime 3000.
Products
Clear product- TimeProvider 41007 vulnerabilities
- Time Provider 41005 vulnerabilities
- GridTime 30004 vulnerabilities
- timeprovider_4100_firmware4 vulnerabilities
- TimePictra2 vulnerabilities
- advanced_software_framework1 vulnerability
- IStaX1 vulnerability
- mplab_harmony1 vulnerability
- MPLAB® Harmony 3 Core Module1 vulnerability
- RN48701 vulnerability
- SAM3N1 vulnerability
- SAM3S1 vulnerability
- SAM3U1 vulnerability
- SAM4C1 vulnerability
- SAM4E1 vulnerability
- SAM4N1 vulnerability
- SAM4S1 vulnerability
- SAME701 vulnerability
- SAMG551 vulnerability
- SAMS701 vulnerability
- SAMV701 vulnerability
- SAMV711 vulnerability
- syncserver_s650_firmware1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-12620MEDIUM | Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time ServerThe GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. CWE-200Jun 19, 2026 | CVSS4.6v4.0 | EPSS0.227% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-12621MEDIUM | Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time ServerImproper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0. CWE-79Jun 19, 2026 | CVSS5.3v4.0 | EPSS0.136% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-12622MEDIUM | Open Redirect Vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time ServerThe GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. CWE-601Jun 19, 2026 | CVSS5.3v4.0 | EPSS0.122% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-12619MEDIUM | GridTime™ 3000 GNSS Time Server CSRF to XSSImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. CWE-79Jun 19, 2026 | CVSS5.1v4.0 | EPSS0.136% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |