GCVE - cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Meinbergglobal (`a276db4f-0f7b-561a-98d1-59eaefe48ddd`)
Product	Lantime Firmware (`a75f9190-3a1a-55f1-8c71-ce4561ac6d3b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-1731`	vulnerable	2026-06-08 05:52:36.864818	Improper Input Validation in Meinberg LTOS HIGH (7.2) In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands. Published: 2023-04-24T13:36:03.117Z Updated: 2025-02-04T19:16:58.162Z Open on db.gcve.eu Reference links https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46903`	vulnerable	2026-06-08 05:38:06.279346	Details available An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. An admin can delete required user accounts (in violation of expected access control). Published: 2024-02-04T00:00:00.000Z Updated: 2025-06-17T17:19:24.606Z Open on db.gcve.eu Reference links https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2021-03-meinberg-lantime-firmware-v7-04-008-und-v6-24-029.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46902`	vulnerable	2026-06-08 05:38:06.278781	Details available An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. Path validation is mishandled, and thus an admin can read or delete files in violation of expected access controls. Published: 2024-02-04T00:00:00.000Z Updated: 2025-06-17T17:20:25.837Z Open on db.gcve.eu Reference links https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2021-03-meinberg-lantime-firmware-v7-04-008-und-v6-24-029.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-16788`	vulnerable	2026-06-08 05:09:01.069898	Details available Directory traversal vulnerability in the "Upload Groupkey" functionality in the Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with Admin-User access to write to arbitrary files and consequently gain root privileges by uploading a file, as demonstrated by storing a file in the cron.d directory. Published: 2017-12-15T18:00:00.000Z Updated: 2024-08-05T20:35:21.107Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Dec/32	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-16787`	vulnerable	2026-06-08 05:09:01.068497	Details available The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read arbitrary files by leveraging failure to restrict URL access. Published: 2017-12-15T18:00:00.000Z Updated: 2024-08-05T20:35:21.026Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Dec/33 https://www.exploit-db.com/exploits/43332/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-16786`	vulnerable	2026-06-08 05:09:01.062185	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.