CVE-2021-46903

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-46903
An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. An admin can delete required user accounts (in violation of expected access control).

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2021-03-meinberg-lantime-firmware-v7-04-008-und-v6-24-029.htm Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*
History

13 Feb 2024, 00:38

Type Values Removed Values Added
CPE cpe:2.3:o:meinbergglobal:lantime_firmware:*:*:*:*:*:*:*:*
Summary
  • (es) Se descubrió un problema en LTOS-Web-Interface en Meinberg LANTIME-Firmware antes de 6.24.029 MBGID-9343 y 7 antes de 7.04.008 MBGID-6303. Un administrador puede eliminar las cuentas de usuario requeridas (en violación del control de acceso esperado).
First Time Meinbergglobal lantime Firmware
Meinbergglobal
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CWE NVD-CWE-Other
References () https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2021-03-meinberg-lantime-firmware-v7-04-008-und-v6-24-029.htm - () https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2021-03-meinberg-lantime-firmware-v7-04-008-und-v6-24-029.htm - Vendor Advisory

04 Feb 2024, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-04 21:15

Updated : 2024-02-13 00:38

NVD link : CVE-2021-46903

Mitre link : CVE-2021-46903

CVE.ORG link : CVE-2021-46903

JSON object : View

Products Affected

meinbergglobal

  • lantime_firmware
CWE
NVD-CWE-Other