CVE-2023-1731: Improper Input Validation in Meinberg LTOS
First published: Mon Apr 24 2023(Updated: )
In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.
Credit: info@cert.vde.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Meinberg Lantime Firmware | <7.06.013 | |
| Meinberg Lantime M100 | ||
| Meinberg Lantime M200 | ||
| Meinberg Global Lantime M300 | ||
| Meinberg Lantime M400 | ||
| Meinberg Lantime M600 | ||
| Meinberg Lantime M900 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-1731?
CVE-2023-1731 is considered a high severity vulnerability due to the potential for remote command execution by authenticated attackers.
How do I fix CVE-2023-1731?
To fix CVE-2023-1731, upgrade to Meinberg Lantime Firmware version 7.06.013 or later.
What type of vulnerability is CVE-2023-1731?
CVE-2023-1731 is a command injection vulnerability that arises from improper input validation during configuration file uploads.
Who is affected by CVE-2023-1731?
CVE-2023-1731 affects Meinberg's LTOS versions prior to 7.06.013, specifically impacting devices using this firmware.
Can CVE-2023-1731 be exploited remotely?
Yes, CVE-2023-1731 can be exploited remotely by authenticated attackers with high privileges.
- agent/type
- agent/softwarecombine
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/title
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/meinbergglobal
- canonical/meinberg lantime firmware
- canonical/meinberg lantime m100
- canonical/meinberg lantime m200
- canonical/meinberg global lantime m300
- canonical/meinberg lantime m400
- canonical/meinberg lantime m600
- canonical/meinberg lantime m900