Medium severity6.5NVD Advisory· Published Dec 19, 2017· Updated Jun 17, 2026

CVE-2017-16786

Description

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the "file" schema in the firmware update functionality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Meinberg/LANTIME-Firmware
cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*
Range: <=6.24.003
Meinberg/Web Configuration Utilityllm-create
Range: <6.24.004
Meinberg/Lantime M100llm-fuzzy
Range: <6.24.004

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.htmlnvdIssue TrackingThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2017/Dec/50nvdIssue TrackingMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000