PatchTheCVECVE-2016-3962: Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000,
CVE-2016-3962 is a high-severity flaw (CVSS 7.3) affecting ntp server firmware, ims-lantime m1000, ims-lantime m3000. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request.
Why this priority
- High severity
- EPSS top 7%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.3 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 5.2% (top 7%) |
| CISA exploited list | No |
| Weakness | CWE-119 |
| Published | 2016-07-03 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2016-3962?
ntp server firmware: upgrade to newer than 6.0; ims-lantime m1000: mitigate or apply the listed mitigation; ims-lantime m3000: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2016-3962 being exploited?
CVE-2016-3962 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2016-3962 affect?
CVE-2016-3962 affects ntp server firmware, ims-lantime m1000, ims-lantime m3000. Severity is high (CVSS 7.3). Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES dev
How urgent is CVE-2016-3962?
Priority 59/100. High severity; EPSS top 7%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2016-3989 HIGH 8.1 UPGRADE MITIGATE The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900
- CVE-2016-3988 HIGH 7.3 UPGRADE MITIGATE Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANT
- CVE-2014-5417 HIGH 7.5 MITIGATE UPGRADE Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019