PT-2017-14559 · Meinberg · Meinberg Lantime

Jakub Palaczynski · Publicado 2017-12-19 · Atualizado 2018-01-08 · CVE-2017-16786

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Meinberg LANTIME devices with firmware prior to 6.24.004

Description The issue allows remote authenticated users with certain privileges to read arbitrary files. This can be achieved via the ntpclientcounterlogfile parameter to "cgi-bin/mainv2" or through vectors involving curl support of the "file" schema in the firmware update functionality.

Recommendations For firmware versions prior to 6.24.004, update to version 6.24.004 or later to resolve the issue. As a temporary workaround, consider restricting access to the "cgi-bin/mainv2" endpoint and limiting the use of the curl functionality in the firmware update process until a patch is applied.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-16786

Produtos afetados

Meinberg Lantime

Referências · 4

• http://packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html · Nota
• http://seclists.org/fulldisclosure/2017/Dec/50 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-16786 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-16786 · Aviso do Fabricante