CVE-2023-1731 — Improper Input Validation in Meinberg LTOS

CVE-2023-1731

Improper Input Validation in Meinberg LTOS PUBLISHED

Description (CNA)

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.

Affected (CNA)

Vendor / product	Versions
Meinberg / LTOS	affected 0.0.0 before 7.06.013

CWE

CWE-434

References

https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm

ADP enrichment

CVE

No English description supplied.

https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm

CISA-ADP

No English description supplied.

No references supplied.