CVE-2026-8332 PUBLISHED

TimePictra root password hardcoded in installation files

Assigner: Microchip
Reserved: 11.05.2026 Published: 12.11.2026 Updated: 12.11.2026

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS Score: 8.8

Product Status

Vendor Microchip
Product TimePictra
Versions Default: unaffected
  • affected from 0 to 12.0 (excl.)

Solutions

Upgrade to TimePictra 12.0 platform or later

Credits

  • Dario Emilio Bertani finder
  • Andrea Sindoni finder
  • Antonio Carriero finder
  • Marco Manieri finder
  • Vito Pistillo finder
  • Davide Renna finder
  • Manuel Leone finder
  • TIM Security Red Team Research reporter

References

Problem Types

  • CWE-798 CWE

Impacts

  • CAPEC-205