Meinberg Funkuhren Lantime M300 and Meinberg Funkuhren Lantime M1000 Command Injection Vulnerabilities

The Meinberg Funkuhren Lantime M300 and the Meinberg Funkuhren Lantime M1000 are both rack-mounted time servers from Meinberg Funkuhren in Germany. A security vulnerability exists in the Meinberg Funkuhren Lantime M300 and Meinberg Funkuhren Lantime M1000. The vulnerability can be exploited to...

PT-2020-19490 · Meinberg · Meinberg Lantime M300 +1

Name of the Vulnerable Software and Affected Versions: Meinberg Lantime M300 and M1000 devices affected versions not specified Description: The issue allows attackers with privileges to configure a device to execute arbitrary OS commands by editing the /config/netconf.cmd script, also known as...

CVE-2020-7240: Improper Neutralization of Special Elements used in an OS Command

Meinberg Lantime M300 and M1000 devices allow attackers with privileges to configure a device to execute arbitrary OS commands by editing the /config/netconf.cmd script aka Extended Network Configuration. Note: According to the description, the vulnerability requires a fully authenticated...