Read the docs

Meinberg

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Meinberg records in CISA KEV

No Meinberg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

Priority MEDIUM 43

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with f…

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.05086 Published 2016-07-03 No fix listed CWE-264
Priority LOW 37

Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01849 Published 2014-11-05 Fixed in 6.15.020 CWE-79
TI-2023-01624 CVE-2023-1731 · GHSA-7j3x-mrc3-42pg

Improper Input Validation in Meinberg LTOS

Priority LOW 36

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary c…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0097 Published 2023-04-24 Fixed in 7.06.013 CWE-434
Priority LOW 34

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M10…

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01112 Published 2016-07-03 No fix listed CWE-119
Open these records in search →