Known vulnerabilities in LANTIME Operating System Firmware (LTOS) 6.20.003

Vendor: Meinberg
Version: 6.20.003
Software CPE: cpe:2.3:h:meinberg:ltos:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting LANTIME Operating System Firmware (LTOS) version 6.20.003 LANTIME Operating System Firmware (LTOS) 6.20.003 is affected by 19 vulnerabilities: 1 high, 10 medium, 8 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109394 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Medium
No
No
6.24.028, 7.02.001 18.05.2025 SB2021042034
#VU109393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
6.24.028, 7.02.001 18.05.2025 SB2021042034
#VU68973 - Out-of-bounds write
CVE-2022-43995
CWE-787 Low
No
No
6.24.035, 7.06.008 05.11.2022 SB2022110501
SB2022110502
SB2022110729
and 17 more
#VU68749 - Cleartext Transmission of Sensitive Information
CVE-2022-42916
CWE-319 Medium
No
No
6.24.035, 7.06.008 26.10.2022 SB2022102624
SB2022102662
SB2022102703
and 27 more
#VU68748 - Double Free
CVE-2022-42915
CWE-415 Medium
No
No
6.24.035, 7.06.008 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 26 more
#VU68747 - Stack-based buffer overflow
CVE-2022-35260
CWE-121 Low
No
No
6.24.035, 7.06.008 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 17 more
#VU67971 - Use After Free
CVE-2022-42012
CWE-416 Low
No
No
6.24.035, 7.06.008 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 57 more
#VU67970 - Out-of-bounds read
CVE-2022-42011
CWE-125 Low
No
No
6.24.035, 7.06.008 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 57 more
#VU67969 - Reachable Assertion
CVE-2022-42010
CWE-617 Low
No
No
6.24.035, 7.06.008 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 58 more
#VU66881 - Improper input validation
CVE-2022-35252
CWE-20 Medium
No
No
6.24.035, 7.06.008 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154
CWE-22 Low
No
No
6.24.034, 7.06.007 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434
CWE-122 High
Public exploit available
No
6.24.034, 7.06.007 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Public exploit available
No
6.24.032, 7.04.017 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
6.24.031, 7.04.016 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU51732 - Security Features
CVE-2021-3450
CWE-254 Medium
No
No
6.24.028, 7.02.003 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU50745 - Improper input validation
CVE-2021-23840
CWE-20 Medium
No
No
6.24.028, 7.02.003 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841
CWE-476 Medium
No
No
6.24.028, 7.02.003 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU50040 - Heap-based Buffer Overflow
CVE-2021-3156
CWE-122 Low
Public exploit available
Exploited
6.24.028, 7.02.002 26.01.2021 SB2021012632
SB2021012633
SB2021012634
and 55 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971
CWE-476 Medium
Public exploit available
No
6.24.027, 7.00.014 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more