CVE-2023-1731: Improper Input Validation in Meinberg LTOS
In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1731?
CVE-2023-1731 is considered a high severity vulnerability due to the potential for remote command execution by authenticated attackers.
How do I fix CVE-2023-1731?
To fix CVE-2023-1731, upgrade to Meinberg Lantime Firmware version 7.06.013 or later.
What type of vulnerability is CVE-2023-1731?
CVE-2023-1731 is a command injection vulnerability that arises from improper input validation during configuration file uploads.
Who is affected by CVE-2023-1731?
CVE-2023-1731 affects Meinberg's LTOS versions prior to 7.06.013, specifically impacting devices using this firmware.
Can CVE-2023-1731 be exploited remotely?
Yes, CVE-2023-1731 can be exploited remotely by authenticated attackers with high privileges.