Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Meinbergglobal Component: Lantime Firmware Clear all filters
TI-2023-01624 CVE-2023-1731 · GHSA-7j3x-mrc3-42pg

Improper Input Validation in Meinberg LTOS

Priority LOW 36

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary c…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0097 Published 2023-04-24 Fixed in 7.06.013 CWE-434
TI-2017-12345 CVE-2017-16786 · GHSA-9398-3g6h-4hv8

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004…

Priority LOW 33

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to c…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02012 Published 2017-12-19 No fix listed CWE-200
TI-2017-12347 CVE-2017-16788 · GHSA-8vwq-796w-c5f5

Directory traversal vulnerability in the "Upload Groupkey" functionality in the Web…

Priority LOW 38

Directory traversal vulnerability in the "Upload Groupkey" functionality in the Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with Admin-User access…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.03995 Published 2017-12-15 No fix listed CWE-22