Meinberg Security Advisory [MBGSA-1701]: LTOS6 Web Interface

Jakub Palaczynski, an independent IT security researcher, reported three vulnerabilities concerning the web user interface of Meinberg devices running on LTOS6 firmware. These vulnerabilities have been fixed in the latest Meinberg stable LTOS6 firmware release 6.24.004 that is available as a free update for all Meinberg customers according to the Meinberg free lifetime security update approach.

Additionally we have received a bug report from Mr. Johannes Weber describing a problem with the “auto generate NTP keys” function of the webUI.

from Meinberg News


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s