« Volver al listado

CVE-2017-16786

Estado: ModificadaMedia (6.5)—

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the "file" schema in the firmware update functionality.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Meinbergglobal — Lantime Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-16786",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-12-19T15:29:00.353",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2017/Dec/50",
      "tags": [
        "Issue Tracking",
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2017/Dec/50",
      "tags": [
        "Issue Tracking",
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the \"file\" schema in the firmware update functionality."
    },
    {
      "lang": "es",
      "value": "Web Configuration Utility en dispositivos Meinberg LANTIME con firmware en versiones anteriores a la 6.24.004 permite que usuarios autenticados remotos con ciertos privilegios lean archivos arbitrarios mediante (1) el parámetro ntpclientcounterlogfile en cgi-bin/mainv2 o (2) vectores relacionados con la compatibilidad curl del esquema \"file\" en la funcionalidad de actualización de firmware."
    }
  ],
  "lastModified": "2026-06-17T01:09:55.410",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "988C7D38-899A-41F5-AD4D-C9682E52E94E",
              "versionEndIncluding": "6.24.003"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:meinbergglobal:lantime_m100:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2541CE93-F4C4-453E-83AC-ED39D83571DF"
            },
            {
              "criteria": "cpe:2.3:h:meinbergglobal:lantime_m1000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E35F4190-89B4-4F14-89C9-C7A4E61FB300"
            },
            {
              "criteria": "cpe:2.3:h:meinbergglobal:lantime_m200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A0C58392-64BE-4A64-9B43-F599D03CBD3E"
            },
            {
              "criteria": "cpe:2.3:h:meinbergglobal:lantime_m300:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D5FCA50A-2C6A-41ED-8E9D-38BA52C8428B"
            },
            {
              "criteria": "cpe:2.3:h:meinbergglobal:lantime_m3000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E589DF47-1C04-4111-9C2B-3B6F9396ED5A"
            },
            {
              "criteria": "cpe:2.3:h:meinbergglobal:lantime_m400:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "51E5EFBE-3C3F-4386-A469-E190611A5A34"
            },
            {
              "criteria": "cpe:2.3:h:meinbergglobal:lantime_m500:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "058F2582-3447-4B8B-8B50-44C1B971CE88"
            },
            {
              "criteria": "cpe:2.3:h:meinbergglobal:lantime_m600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "46F4C7AA-30BB-402B-A21C-6FEEC919853C"
            },
            {
              "criteria": "cpe:2.3:h:meinbergglobal:lantime_m900:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "164CB3CF-F979-4591-8DF8-972123E216B0"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}