CVE-2014-5417

HIGH · 7.5 CVSS Gepubliceerd: 05-11-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendors

Meinberg

Affected products

Ntp Server Firmware Lantime M100 Lantime M200 Lantime M300 Lantime M3000 Lantime M400 Lantime M600 Lantime M900

References

news.meinberg.de
www.meinbergglobal.com
www.securityfocus.com
github.com
www.cisa.gov
ics-cert.us-cert.gov