What is CVE-2023-1731?

CVE-2023-1731 is a high-severity vulnerability in Meinberg Ltos, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 7.2/10. Published 2023-04-24.

How severe is CVE-2023-1731?

High severity. CVSS v3 base score is 7.2 out of 10.

Arbitrary file upload in Meinberg Ltos

CVE-2023-1731

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.

Vulnerability class: Unrestricted File Upload

EPSS: 0.010 (58.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Meinberg Ltos — versions 0.0.0
Meinbergglobal Lantime_firmware
Meinbergglobal Lantime_m100
Meinbergglobal Lantime_m200
Meinbergglobal Lantime_m300
Meinbergglobal Lantime_m400
Meinbergglobal Lantime_m600
Meinbergglobal Lantime_m900

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

info@cert.vde.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-1731?: CVE-2023-1731 is a high-severity vulnerability in Meinberg Ltos, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 7.2/10. Published 2023-04-24.
How severe is CVE-2023-1731?: High severity. CVSS v3 base score is 7.2 out of 10.