CVE-2025-9497 | Microchip Time Provider 4100 up to 2.4.x Software Update hard-coded credentials

A vulnerability classified as critical was found in Microchip Time Provider 4100 up to 2.4.x. The affected element is an unknown function of the component Software Update Handler. Such manipulation leads to hard-coded credentials.

This vulnerability is traded as CVE-2025-9497. An attack has to be approached locally. There is no exploit available.

Upgrading the affected component is advised.