The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the "file" schema in the firmware update functionality.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-12-19T15:00:00
Updated: 2024-08-05T20:35:20.950Z
Reserved: 2017-11-10T00:00:00
Link: CVE-2017-16786
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-12-19T15:29:00.353
Modified: 2018-01-08T15:33:52.950
Link: CVE-2017-16786
Redhat
No data.