In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.
References
| Link | Resource |
|---|---|
| https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
23 May 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands. |
03 May 2023, 14:21
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-434 | |
| CPE | cpe:2.3:h:meinbergglobal:lantime_m300:-:*:*:*:*:*:*:* cpe:2.3:h:meinbergglobal:lantime_m400:-:*:*:*:*:*:*:* cpe:2.3:h:meinbergglobal:lantime_m600:-:*:*:*:*:*:*:* cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:meinbergglobal:lantime_m900:-:*:*:*:*:*:*:* cpe:2.3:h:meinbergglobal:lantime_m100:-:*:*:*:*:*:*:* cpe:2.3:h:meinbergglobal:lantime_m200:-:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm - Vendor Advisory | |
| First Time |
Meinbergglobal lantime M400
Meinbergglobal lantime M600 Meinbergglobal lantime M100 Meinbergglobal Meinbergglobal lantime M900 Meinbergglobal lantime M300 Meinbergglobal lantime M200 Meinbergglobal lantime Firmware |
24 Apr 2023, 15:35
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-24 14:15
Updated : 2023-05-23 06:15
NVD link : CVE-2023-1731
Mitre link : CVE-2023-1731
JSON object : View
Products Affected
meinbergglobal
- lantime_m200
- lantime_m900
- lantime_firmware
- lantime_m100
- lantime_m300
- lantime_m600
- lantime_m400
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type