Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0HIGH 7.5·Network·No auth·Interaction —·EPSS 0.01849·Published 2014-11-05·Fixed in 6.15.020CWE-79
In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary c…
CVSS 3.1HIGH 7.2·Network·High privileges·No interaction·EPSS 0.0097·Published 2023-04-24·Fixed in 7.06.013CWE-434