Stack-based buffer overflow in IMS-LANTIME M3000
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2016-3988 |
| CWE-ID | CWE-121 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
LCES Other software / Other software solutions SyncFire 1100 Other software / Other software solutions LANTIME M100 Other software / Other software solutions LANTIME M200 Other software / Other software solutions LANTIME M400 Other software / Other software solutions LANTIME M600 Other software / Other software solutions LANTIME M900 Other software / Other software solutions IMS-LANTIME M500 Other software / Other software solutions IMS-LANTIME M1000 Other software / Other software solutions |
| Vendor | Meinberg radio clocks GmbH & Co. KG |
Security Bulletin
This security bulletin contains one high risk vulnerability.
1) Stack-based buffer overflow
EUVDB-ID: #VU56
Risk: High
CVSSv3.1: 7.9 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2016-3988
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to boundary error while parsing nine different parameters in POST request in function.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Meinberg has produced a new firmware Version 6.20.004.
Vulnerable software versionsLCES: 6.0
SyncFire 1100: 6.0
LANTIME M100: 6.0
LANTIME M200: 6.0
LANTIME M400: 6.0
LANTIME M600 : 6.0
LANTIME M900 : 6.0
IMS-LANTIME M500: 6.0
IMS-LANTIME M1000: 6.0
External linkshttp://ics-cert.us-cert.gov/advisories/ICSA-16-175-03
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
