What’s Vulnerable › Vulnerabilities

CVE-2016-3989

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2016-07-03 · updated 2026-06-17
• Weakness: CWE-264

Description

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote authenticated users to obtain root privileges for writing to unspecified scripts, and consequently obtain sensitive information or modify data, by leveraging access to the nobody account.

Affected products

• Meinberg Ims-Lantime M1000: all versions
• Meinberg Ims-Lantime M3000: all versions
• Meinberg Ims-Lantime M500: all versions
• Meinberg Lantime M100: all versions
• Meinberg Lantime M200: all versions
• Meinberg Lantime M300: all versions
• Meinberg Lantime M400: all versions
• Meinberg Lantime M600: all versions
• Meinberg Lantime M900: all versions
• Meinberg Lces: all versions
• Meinberg Ntp Server Firmware: through 6.0
• Meinberg Syncfire 1100: all versions

References

• https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03
• https://www.exploit-db.com/exploits/40120/
• https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03
• https://www.exploit-db.com/exploits/40120/

Get alerted when CVE-2016-3989 or the next vulnerability affects your stack