CVE-2017-16786

Published: Dec 19, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the "file" schema in the firmware update functionality.

Affected (1)

Products: Meinbergglobal: Lantime Firmware

Meinbergglobal

1 product

Lantime Firmware

Configuration A

1 vulnerable · 9 platform

Vulnerable Software	Affected Versions
Meinbergglobal Lantime Firmware	Up to 6.24.003

Running on/with	Platform Versions
Meinbergglobal Lantime M100	All versions
Meinbergglobal Lantime M1000	All versions
Meinbergglobal Lantime M200	All versions
Meinbergglobal Lantime M300	All versions
Meinbergglobal Lantime M3000	All versions
Meinbergglobal Lantime M400	All versions
Meinbergglobal Lantime M500	All versions
Meinbergglobal Lantime M600	All versions
Meinbergglobal Lantime M900	All versions