What’s Vulnerable › Vulnerabilities

CVE-2016-3988

• Severity: high (CVSS 7.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-07-03 · updated 2026-06-17
• Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via a crafted parameter in a POST request.

Affected products

• Meinberg Ims-Lantime M1000: all versions
• Meinberg Ims-Lantime M3000: all versions
• Meinberg Ims-Lantime M500: all versions
• Meinberg Lantime M100: all versions
• Meinberg Lantime M200: all versions
• Meinberg Lantime M300: all versions
• Meinberg Lantime M400: all versions
• Meinberg Lantime M600: all versions
• Meinberg Lantime M900: all versions
• Meinberg Lces: all versions
• Meinberg Ntp Server Firmware: through 6.0
• Meinberg Syncfire 1100: all versions

References

• https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03
• https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03

Get alerted when CVE-2016-3988 or the next vulnerability affects your stack