Medium severity6.5NVD Advisory· Published Dec 19, 2017· Updated May 13, 2026
CVE-2017-16786
CVE-2017-16786
Description
The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the "file" schema in the firmware update functionality.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.htmlnvdIssue TrackingThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2017/Dec/50nvdIssue TrackingMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.