Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Meinberg Clear all filters
TI-2023-01624 CVE-2023-1731 · GHSA-7j3x-mrc3-42pg

Improper Input Validation in Meinberg LTOS

Priority LOW 36

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary c…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0097 Published 2023-04-24 Fixed in 7.06.013 CWE-434
TI-2016-03390 CVE-2016-3989 · GHSA-qf6p-prwp-r624

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000…

Priority MEDIUM 43

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with f…

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.05086 Published 2016-07-03 No fix listed CWE-264
TI-2016-03389 CVE-2016-3988 · GHSA-f8x5-847r-2pc6

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg…

Priority LOW 34

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M10…

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01112 Published 2016-07-03 No fix listed CWE-119
TI-2014-04416 CVE-2014-5417 · GHSA-7h4g-fv39-cwf4

Cross-site scripting in Meinberg Radio Clocks LANTIME M-Series

Priority LOW 37

Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01849 Published 2014-11-05 Fixed in 6.15.020 CWE-79