← Back

CVE-2015-7973

nvd nist
Published: Jan 30, 2017Modified: May 13, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Exploitability: 2.2 / Impact: 4.2
Source: NVD

Description

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.

Affected (79)

Show all products
Ntp: Ntp · Siemens: Tim 4r Ie Firmware, Tim 4r Ie Dnp3 Firmware · Freebsd: Freebsd · Netapp: Clustered Data Ontap, Oncommand Balance · Canonical: Ubuntu Linux
Ntp
1 product
Ntp
Siemens
2 products
Tim 4r Ie Firmware
Tim 4r Ie Dnp3 Firmware
Freebsd
1 product
Freebsd
Netapp
2 products
Clustered Data Ontap
Oncommand Balance
Canonical
1 product
Ubuntu Linux
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Ntp
Ntp
Before 4.2.8
Ntp
From 4.3.0 to 4.3.90
Ntp
Version 4.2.8
Ntp
Version 4.2.8 p1-beta1
Ntp
Version 4.2.8 p1-beta2
Ntp
Version 4.2.8 p1-beta3
Ntp
Version 4.2.8 p1-beta4
Ntp
Version 4.2.8 p1-beta5
Ntp
Version 4.2.8 p1-rc1
Ntp
Version 4.2.8 p1-rc2
Ntp
Version 4.2.8 p1
Ntp
Version 4.2.8 p2-rc1
Ntp
Version 4.2.8 p2-rc2
Ntp
Version 4.2.8 p2-rc3
Ntp
Version 4.2.8 p2
Ntp
Version 4.2.8 p3-rc1
Ntp
Version 4.2.8 p3-rc2
Ntp
Version 4.2.8 p3-rc3
Ntp
Version 4.2.8 p3
Ntp
Version 4.2.8 p4
Ntp
Version 4.2.8 p5
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tim 4r Ie Firmware
All versions
Running on/withPlatform Versions
Siemens
Tim 4r Ie
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tim 4r Ie Dnp3 Firmware
All versions
Running on/withPlatform Versions
Siemens
Tim 4r Ie Dnp3
All versions
Configuration D
51 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
From 10.0 to 10.1
Freebsd
Version 10.1
Freebsd
Version 10.1 p10
Freebsd
Version 10.1 p12
Freebsd
Version 10.1 p15
Freebsd
Version 10.1 p16
Freebsd
Version 10.1 p17
Freebsd
Version 10.1 p18
Freebsd
Version 10.1 p19
Freebsd
Version 10.1 p1
Freebsd
Version 10.1 p22
Freebsd
Version 10.1 p24
Freebsd
Version 10.1 p25
Freebsd
Version 10.1 p26
Freebsd
Version 10.1 p27
Freebsd
Version 10.1 p2
Freebsd
Version 10.1 p3
Freebsd
Version 10.1 p4
Freebsd
Version 10.1 p5
Freebsd
Version 10.1 p6
Freebsd
Version 10.1 p7
Freebsd
Version 10.1 p8
Freebsd
Version 10.1 p9
Freebsd
Version 10.2
Freebsd
Version 10.2 p10
Freebsd
Version 10.2 p1
Freebsd
Version 10.2 p2
Freebsd
Version 10.2 p5
Freebsd
Version 10.2 p7
Freebsd
Version 10.2 p8
Freebsd
Version 10.2 p9
Freebsd
Version 9.3
Freebsd
Version 9.3 p10
Freebsd
Version 9.3 p12
Freebsd
Version 9.3 p13
Freebsd
Version 9.3 p16
Freebsd
Version 9.3 p19
Freebsd
Version 9.3 p1
Freebsd
Version 9.3 p20
Freebsd
Version 9.3 p21
Freebsd
Version 9.3 p22
Freebsd
Version 9.3 p23
Freebsd
Version 9.3 p24
Freebsd
Version 9.3 p25
Freebsd
Version 9.3 p2
Freebsd
Version 9.3 p3
Freebsd
Version 9.3 p5
Freebsd
Version 9.3 p6
Freebsd
Version 9.3 p7
Freebsd
Version 9.3 p8
Freebsd
Version 9.3 p9
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Clustered Data Ontap
All versions
Oncommand Balance
All versions
Configuration F
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 12.04
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04

Related CWEs

CWE-254
CWE-254

References (44)

Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.