CVE-2016-3988
Last modified
CVE-2016-3988 is a vulnerability of currently unknown severity. Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request.. EPSS estimates a 1.11% chance of exploitation in the next 30 days.
Description
Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Meinberg | Ntp Server Firmware | <= 6.0 |
| Meinberg | Ims-Lantime M1000 | All versions |
| Meinberg | Ims-Lantime M3000 | All versions |
| Meinberg | Ims-Lantime M500 | All versions |
| Meinberg | Lantime M100 | All versions |
| Meinberg | Lantime M200 | All versions |
| Meinberg | Lantime M300 | All versions |
| Meinberg | Lantime M400 | All versions |
| Meinberg | Lantime M600 | All versions |
| Meinberg | Lantime M900 | All versions |
| Meinberg | Lces | All versions |
| Meinberg | Syncfire 1100 | All versions |
References
- https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-3988?
How severe is CVE-2016-3988?
How do I fix CVE-2016-3988?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-3982Off-by-one error in the bmp_rle4_fread function in pngxrbmp.…
- CVE-2016-3983McAfee Advanced Threat Defense (ATD) before 3.4.8.178 might …
- CVE-2016-3984The McAfee VirusScan Console (mcconsol.exe) in McAfee Active…
- CVE-2016-3985The Terminal Services Remote Desktop Protocol (RDP) client s…
- CVE-2016-3986Avast allows remote attackers to cause a denial of service (…
- CVE-2016-3987The HTTP server in Trend Micro Password Manager allows remot…9.8
- CVE-2016-3989The NTP time-server interface on Meinberg IMS-LANTIME M3000,…
- CVE-2016-3990Heap-based buffer overflow in the horizontalDifference8 func…
- CVE-2016-3991Heap-based buffer overflow in the loadImage function in the …
- CVE-2016-3992cronic before 3 allows local users to write to arbitrary fil…
- CVE-2016-3993Off-by-one error in the __imlib_MergeUpdate function in lib/…
- CVE-2016-3994The GIF loader in imlib2 before 1.4.9 allows remote attacker…
Are you affected by CVE-2016-3988?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST