Meinberg Multiple Vulnerabilities in LANTIME Products (CVE-2017-16788)

Directory traversal vulnerability in the Upload Groupkey functionality in the Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with Admin-User access to write to arbitrary files and consequently gain root privileges by uploading...

CVE-2020-16788

...

CVE-2020-16788

This CVE entry is rejected and does not represent an active vulnerability.

CVE-2019-16788

This CVE entry is rejected/not used; reference CVE-2019-20043 instead.

CVE-2017-16788

CVE-2017-16788 affects Meinberg LANTIME Web Configuration Utility on LTOS6 devices with firmware before 6.24.004. The vulnerability is a directory traversal in the Upload Groupkey functionality that allows remote-authenticated Admin-User actors to write to arbitrary files and potentially gain roo...

Meinberg LANTIME Web Configuration Utility 6.16.008 - Arbitrary File Read Vulnerability (2)

Exploit for cgi platform in category web applications Title: Meinberg LANTIME Web Configuration Utility - Arbitrary File Upload Path Traversal Author: Jakub Palaczynski CVE: CVE-2017-16788 Exploit was tested on: ====================== Meinberg LANTIME Web Configuration Utility 6.16.008...

Meinberg LANTIME Web Configuration Utility 6.16.008 Arbitrary File Upload

Title: Meinberg LANTIME Web Configuration Utility - Arbitrary File Upload Path Traversal Author: Jakub Palaczynski CVE: CVE-2017-16788 Exploit was tested on: ====================== Meinberg LANTIME Web Configuration Utility 6.16.008 Vulnerability affects: ====================== All LTOS6 firmware...