CVE-2014-5417

2014-11-0511:55:06

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-5417

cross-site scripting

xss

meinberg ntp server

lantime m-series

firmware vulnerability

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

JSON

Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

meinbergntp_server_firmwareMatch-

AND

meinberglantime_m100Range≤6.15.0.19

meinberglantime_m200Range≤6.15.0.19

meinberglantime_m300Range≤6.15.0.19

meinberglantime_m3000Range≤6.15.0.19

meinberglantime_m400Range≤6.15.0.19

meinberglantime_m600Range≤6.15.0.19

meinberglantime_m900Range≤6.15.0.19

CPENameOperatorVersion
meinberg:ntp_server_firmwaremeinberg ntp server firmwareeq-
meinberg:lantime_m100meinberg lantime m100le6.15.0.19
meinberg:lantime_m200meinberg lantime m200le6.15.0.19
meinberg:lantime_m300meinberg lantime m300le6.15.0.19
meinberg:lantime_m3000meinberg lantime m3000le6.15.0.19
meinberg:lantime_m400meinberg lantime m400le6.15.0.19
meinberg:lantime_m600meinberg lantime m600le6.15.0.19
meinberg:lantime_m900meinberg lantime m900le6.15.0.19

CPE	Name	Operator	Version
meinberg:ntp_server_firmware	meinberg ntp server firmware	eq	-
meinberg:lantime_m100	meinberg lantime m100	le	6.15.0.19
meinberg:lantime_m200	meinberg lantime m200	le	6.15.0.19
meinberg:lantime_m300	meinberg lantime m300	le	6.15.0.19
meinberg:lantime_m3000	meinberg lantime m3000	le	6.15.0.19
meinberg:lantime_m400	meinberg lantime m400	le	6.15.0.19
meinberg:lantime_m600	meinberg lantime m600	le	6.15.0.19
meinberg:lantime_m900	meinberg lantime m900	le	6.15.0.19