high7.3
CVE-2016-3988
Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIM…
Impact
Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Meinberg | Ntp Server Firmware | through 6.0 |
| Meinberg | Ims-Lantime M1000 | All versions |
| Meinberg | Ims-Lantime M3000 | All versions |
| Meinberg | Ims-Lantime M500 | All versions |
| Meinberg | Lantime M100 | All versions |
| Meinberg | Lantime M200 | All versions |
| Meinberg | Lantime M300 | All versions |
| Meinberg | Lantime M400 | All versions |
| Meinberg | Lantime M600 | All versions |
| Meinberg | Lantime M900 | All versions |
| Meinberg | Lces | All versions |
| Meinberg | Syncfire 1100 | All versions |