Vulners
Lucene search
Meinberg LANTIME Web Configuration Utility 6.16.008 Authentication Bypass
🗓️ 13 Dec 2017 00:00:00Reported by Jakub PalaczynskiType 
packetstorm🔗 packetstormsecurity.com👁 30 Views
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | Meinberg LANTIME Web Configuration Utility 6.16.008 - Arbitrary File Read Vulnerability | 14 Dec 201700:00 | – | zdt |
| Meinberg LANTIME Web Configuration Utility 6.16.008 Authentication Bypass Vulnerability | 14 Dec 201700:00 | – | zdt |
 | Meinberg LANTIME Web Arbitrary File Read Vulnerability | 18 Dec 201700:00 | – | cnvd |
 | CVE-2017-16787 | 15 Dec 201718:00 | – | cve |
 | CVE-2017-16787 | 15 Dec 201718:00 | – | cvelist |
 | Meinberg LANTIME Web Configuration Utility 6.16.008 - Arbitrary File Read | 13 Dec 201700:00 | – | exploitdb |
 | EUVD-2017-7965 | 7 Oct 202500:30 | – | euvd |
 | Meinberg LANTIME Web Configuration Utility 6.16.008 - Arbitrary File Read | 13 Dec 201700:00 | – | exploitpack |
 | CVE-2017-16787 | 15 Dec 201718:29 | – | nvd |
| Meinberg LANTIME Web Configuration Utility 6.16.008 Arbitrary File Read | 13 Dec 201700:00 | – | packetstorm |
10
`Title: Meinberg LANTIME Web Configuration Utility - Failure to Restrict URL
Access
Author: Jakub Palaczynski
CVE: CVE-2017-16787
Exploit tested on:
==================
Meinberg LANTIME Web Configuration Utility 6.16.008
Vulnerability affects:
======================
All LTOS6 firmware releases before 6.24.004
Vulnerability:
**************
Failure to Restrict URL Access:
===============================
Any user is able to read all files stored outside cgi-bin directory without
authentication. This way it is possible to download firmware, statistics or
diagnostics files that are stored in upload directory.
Contact:
========
Jakub[dot]Palaczynski[at]gmail[dot]com
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Dec 2017 00:00Current
0.6Low risk
Vulners AI Score0.6
EPSS0.09187