Lucene search

[email protected]CVE-2016-3988

HistoryJul 03, 2016 - 2:59 p.m.

CVE-2016-3988

2016-07-0314:59:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2016-3988

ntp

meinberg ims-lantime

buffer overflow

security vulnerability

firmware issue

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.0%

JSON

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request.

CPENameOperatorVersion
meinberg:ntp_server_firmwaremeinberg ntp server firmwarele6.0
meinberg:ims-lantime_m1000meinberg ims-lantime m1000eq-
meinberg:ims-lantime_m3000meinberg ims-lantime m3000eq-
meinberg:ims-lantime_m500meinberg ims-lantime m500eq-
meinberg:lantime_m100meinberg lantime m100eq-
meinberg:lantime_m200meinberg lantime m200eq-
meinberg:lantime_m300meinberg lantime m300eq-
meinberg:lantime_m400meinberg lantime m400eq-
meinberg:lantime_m600meinberg lantime m600eq-
meinberg:lantime_m900meinberg lantime m900eq-

CPE	Name	Operator	Version
meinberg:ntp_server_firmware	meinberg ntp server firmware	le	6.0
meinberg:ims-lantime_m1000	meinberg ims-lantime m1000	eq	-
meinberg:ims-lantime_m3000	meinberg ims-lantime m3000	eq	-
meinberg:ims-lantime_m500	meinberg ims-lantime m500	eq	-
meinberg:lantime_m100	meinberg lantime m100	eq	-
meinberg:lantime_m200	meinberg lantime m200	eq	-
meinberg:lantime_m300	meinberg lantime m300	eq	-
meinberg:lantime_m400	meinberg lantime m400	eq	-
meinberg:lantime_m600	meinberg lantime m600	eq	-
meinberg:lantime_m900	meinberg lantime m900	eq	-

Rows per page:

1-10 of 121

References

ics-cert.us-cert.gov/advisories/ICSA-16-175-03

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.0%

JSON

Related for CVE-2016-3988

prion1 cvelist1 ics1 openvas1