Vendors / NTPsec Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 6 CVSS 7.0–8.9
Exploited now NTPsec records in CISA KEV No NTPsec vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
An issue was discovered in NTPsec before 1.1.3.
CVSS 3.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.66881 · Published 2019-01-16 · No fix listed CWE-125
Priority HIGH 69
An issue was discovered in NTPsec before 1.1.3.
CVSS 3.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.45719 · Published 2019-01-16 · No fix listed CWE-125
Priority MEDIUM 44
An issue was discovered in NTPsec before 1.1.3.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.14689 · Published 2019-01-16 · No fix listed CWE-476
Priority MEDIUM 44
An issue was discovered in NTPsec before 1.1.3.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.1371 · Published 2019-01-16 · No fix listed CWE-787
Priority LOW 39
ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0045 · Published 2023-08-07 · No fix listed CWE-372
Priority LOW 33
ntpkeygen can generate keys that ntpd fails to parse.
CVSS 3.1 HIGH 7.4· Network · No auth · No interaction · EPSS 0.00522 · Published 2021-06-08 · No fix listed CWE-327
Priority LOW 22
ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks.
CVSS 3.0 LOW 3.7· Network · No auth · No interaction · EPSS 0.02233 · Published 2017-01-27 · No fix listed CWE-254
Open these records in search → All records by CVSS severity
Critical2 High6 Medium5 Low2 No CVSS0