Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Meinberg Component: Lantime M100 Clear all filters
TI-2016-03390 CVE-2016-3989 · GHSA-qf6p-prwp-r624

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000…

Priority MEDIUM 43

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with f…

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.05086 Published 2016-07-03 No fix listed CWE-264
TI-2016-03389 CVE-2016-3988 · GHSA-f8x5-847r-2pc6

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg…

Priority LOW 34

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M10…

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01112 Published 2016-07-03 No fix listed CWE-119
TI-2014-04416 CVE-2014-5417 · GHSA-7h4g-fv39-cwf4

Cross-site scripting in Meinberg Radio Clocks LANTIME M-Series

Priority LOW 37

Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01849 Published 2014-11-05 Fixed in 6.15.020 CWE-79