CVE-2016-3988
High
Description
Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request.
SeverityHigh
CVSS7.3
Exploit probability—
ProductMeinberg Ims-lantime
PublishedJul 3, 2016
First seenJul 3, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| meinberg ims-lantime_m1000 | No range specified | — |
| meinberg ntp_server_firmware | v ≤ 6.0 | — |
| meinberg ims-lantime_m3000 | No range specified | — |
| meinberg ims-lantime_m500 | No range specified | — |
| meinberg lantime_m100 | No range specified | — |
| meinberg lantime_m200 | No range specified | — |
| meinberg lantime_m300 | No range specified | — |
| meinberg lantime_m400 | No range specified | — |
| meinberg lantime_m600 | No range specified | — |
| meinberg lantime_m900 | No range specified | — |
| meinberg lces | No range specified | — |
| meinberg syncfire_1100 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.