1. Home
  2. CVE Database
  3. CVE-2023-1731
HIGH · 7.2

CVE-2023-1731

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to...

Vulnerability Description

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MeinbergglobalLantime Firmware< 7.06.013
MeinbergglobalLantime M100-
MeinbergglobalLantime M200-
MeinbergglobalLantime M300-
MeinbergglobalLantime M400-
MeinbergglobalLantime M600-
MeinbergglobalLantime M900-

Related Weaknesses (CWE)

CWE-434

References

FAQ

What is CVE-2023-1731?

CVE-2023-1731 is a vulnerability with a CVSS score of 7.2 (HIGH). In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to...

How severe is CVE-2023-1731?

CVE-2023-1731 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-1731?

Check the references section above for vendor advisories and patch information. Affected products include: Meinbergglobal Lantime Firmware, Meinbergglobal Lantime M100, Meinbergglobal Lantime M200, Meinbergglobal Lantime M300, Meinbergglobal Lantime M400.