CVE-2021-46902: Meinbergglobal Lantime Firmware

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. Path validation is mishandled, and thus an admin can read or delete files in violation of expected access controls.

Affected products

• Meinbergglobal Lantime Firmware: before 6.24.029 (fixed in 6.24.029); from 7.0.0, before 7.04.008 (fixed in 7.04.008)

Published 2024-02-04. Last modified 2026-06-17.