High severity8.1NVD Advisory· Published Jul 3, 2016· Updated Jun 17, 2026
CVE-2016-3989
CVE-2016-3989
Description
The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote authenticated users to obtain root privileges for writing to unspecified scripts, and consequently obtain sensitive information or modify data, by leveraging access to the nobody account.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:h:meinberg:ims-lantime_m1000:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:meinberg:ims-lantime_m1000:-:*:*:*:*:*:*:*
- (no CPE)range: < 6.20.004
cpe:2.3:h:meinberg:ims-lantime_m3000:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:meinberg:ims-lantime_m3000:-:*:*:*:*:*:*:*
- (no CPE)range: < 6.20.004
cpe:2.3:h:meinberg:ims-lantime_m500:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:meinberg:ims-lantime_m500:-:*:*:*:*:*:*:*
- (no CPE)range: < 6.20.004
- cpe:2.3:h:meinberg:lantime_m100:-:*:*:*:*:*:*:*
- cpe:2.3:h:meinberg:lantime_m200:-:*:*:*:*:*:*:*
- cpe:2.3:h:meinberg:lantime_m300:-:*:*:*:*:*:*:*
- cpe:2.3:h:meinberg:lantime_m400:-:*:*:*:*:*:*:*
- cpe:2.3:h:meinberg:lantime_m600:-:*:*:*:*:*:*:*
- cpe:2.3:h:meinberg:lantime_m900:-:*:*:*:*:*:*:*
- cpe:2.3:h:meinberg:syncfire_1100:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- ics-cert.us-cert.gov/advisories/ICSA-16-175-03nvdThird Party AdvisoryUS Government Resource
- www.exploit-db.com/exploits/40120/nvd
News mentions
0No linked articles in our index yet.