VYPR
← All advisories
High severity7.2NVD Advisory· Published Feb 4, 2024· Updated Jun 17, 2026

CVE-2021-46902

CVE-2021-46902

Description

An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. Path validation is mishandled, and thus an admin can read or delete files in violation of expected access controls.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Meinberg/LANTIME-Firmwaredescription
  • Meinberg/LANTIME-Firmware2 versions
    cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*range: <6.24.029
    • (no CPE)range: <6.24.029 MBGID-9343, <7.04.008 MBGID-6303
  • Meinberg/LTOS-Web-Interfacellm-create
    Range: <6.24.029 MBGID-9343, <7.04.008 MBGID-6303

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.