PatchTheCVEmeinberg vulnerabilities
Recent CVEs affecting meinberg products. 4 tracked.
meinberg has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2016-07-03. Highest priority: CVE-2016-3962 (score 59/100).
- CVE-2016-3989 HIGH 8.1 UPGRADE MITIGATE The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900
- CVE-2016-3988 HIGH 7.3 UPGRADE MITIGATE Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANT
- CVE-2016-3962 HIGH 7.3 UPGRADE MITIGATE Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000,
- CVE-2014-5417 HIGH 7.5 MITIGATE UPGRADE Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019
FAQ
How do I fix meinberg vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is meinberg being exploited right now?
None of the tracked meinberg CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which meinberg CVE should I patch first?
CVE-2016-3962 currently ranks highest (59/100): Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000,.