PT-2017-14559 · Meinberg · Meinberg Lantime

Jakub Palaczynski · Published 2017-12-19 · Updated 2018-01-08 · CVE-2017-16786

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Meinberg LANTIME devices with firmware prior to 6.24.004

Description The issue allows remote authenticated users with certain privileges to read arbitrary files. This can be achieved via the ntpclientcounterlogfile parameter to "cgi-bin/mainv2" or through vectors involving curl support of the "file" schema in the firmware update functionality.

Recommendations For firmware versions prior to 6.24.004, update to version 6.24.004 or later to resolve the issue. As a temporary workaround, consider restricting access to the "cgi-bin/mainv2" endpoint and limiting the use of the curl functionality in the firmware update process until a patch is applied.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-16786

Affected Products

Meinberg Lantime

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-16786 · Security Note
• https://osv.dev/vulnerability/CVE-2017-16786 · Vendor Advisory
• http://packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html · Note
• http://seclists.org/fulldisclosure/2017/Dec/50 · Note