Stack-based buffer overflow in Meinberg products - CVE-2016-3988

Vulnerability identifier: #VU56

CSH Severity: High

CVSS v4: 7.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-3988

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error while parsing nine different parameters in POST request in function.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

LCES
SyncFire 1100
LANTIME M100
LANTIME M200
LANTIME M400
LANTIME M600
LANTIME M900
IMS-LANTIME M500
IMS-LANTIME M1000

Meinberg has produced a new firmware Version 6.20.004.

• https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03

• Stack-based buffer overflow in IMS-LANTIME M3000