Read the docs

Meinbergglobal

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Meinbergglobal records in CISA KEV

No Meinbergglobal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lantime Firmware 6 records LOW Lantime M1000 Firmware 1 record MEDIUM Lantime M300 Firmware 1 record MEDIUM Syncbox/ptpv2 Firmware 1 record LOW

Records

6 records in Lantime Firmware · all components

TI-2017-12347 CVE-2017-16788 · GHSA-8vwq-796w-c5f5

Directory traversal vulnerability in the "Upload Groupkey" functionality in the Web…

Priority LOW 38

Directory traversal vulnerability in the "Upload Groupkey" functionality in the Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with Admin-User access…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.03995 Published 2017-12-15 No fix listed CWE-22
TI-2023-01624 CVE-2023-1731 · GHSA-7j3x-mrc3-42pg

Improper Input Validation in Meinberg LTOS

Priority LOW 36

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary c…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0097 Published 2023-04-24 Fixed in 7.06.013 CWE-434
TI-2017-12345 CVE-2017-16786 · GHSA-9398-3g6h-4hv8

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004…

Priority LOW 33

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to c…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02012 Published 2017-12-19 No fix listed CWE-200
Open these records in search →