{"id":"CVE-2020-7240","aliases":["EUVD-2020-28367","GHSA-924j-9954-rvrv"],"status":"disputed","title":"Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device)...","description":"Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Configuration). Note: According to the description, the vulnerability requires a fully authenticated super-user account using a webUI function that allows super users to edit a script supposed to execute OS commands. The given weakness enumeration (CWE-78) is not applicable in this case as it refers to abusing functions/input fields not supposed to be accepting OS commands by using 'Special Elements.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02437,"percentile":0.84396,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2020-01-20T19:27:51Z","modified":"2026-06-17T03:24:34Z","products":[{"vendor":"meinberg","product":"ims-lantime_m1000"},{"vendor":"meinberg","product":"lantime_m300"},{"vendor":"meinbergglobal","product":"lantime_m1000_firmware"},{"vendor":"meinbergglobal","product":"lantime_m300_firmware"}],"references":[{"url":"https://sku11army.blogspot.com/2020/01/heinberg-lantime-m1000-rce.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://sku11army.blogspot.com/2020/01/meinberg-lantime-m1000-rce.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://wolke.meinberg.de/index.php/s/dKP3PKgFXS6sPRE#pdfviewer","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7240"},{"url":"https://github.com/advisories/GHSA-924j-9954-rvrv"}],"sources":{"cve":[{"id":"CVE-2020-7240","description":"Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Configuration). Note: According to the description, the vulnerability requires a fully authenticated super-user account using a webUI function that allows super users to edit a script supposed to execute OS commands. The given weakness enumeration (CWE-78) is not applicable in this case as it refers to abusing functions/input fields not supposed to be accepting OS commands by using 'Special Elements.","status":"disputed","published":"2020-01-20T19:27:51Z","modified":"2024-08-28T13:28:59.219Z","updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28367","description":"Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Configuration). Note: According to the description, the vulnerability requires a fully authenticated super-user account using a webUI function that allows super users to edit a script supposed to execute OS commands. The given weakness enumeration (CWE-78) is not applicable in this case as it refers to abusing functions/input fields not supposed to be accepting OS commands by using 'Special Elements.","status":"published","published":"2020-01-20T19:27:51Z","modified":"2024-08-28T13:28:59Z","updated_at":"2026-11-03T00:56:09.903799Z"}],"ghsa":[{"id":"GHSA-924j-9954-rvrv","title":"Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device)...","description":"Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Configuration).","status":"published","published":"2022-05-24T17:06:56Z","modified":"2024-03-21T03:33:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:55:42.026509Z"}],"nvd":[{"id":"CVE-2020-7240","description":"Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Configuration). Note: According to the description, the vulnerability requires a fully authenticated super-user account using a webUI function that allows super users to edit a script supposed to execute OS commands. The given weakness enumeration (CWE-78) is not applicable in this case as it refers to abusing functions/input fields not supposed to be accepting OS commands by using 'Special Elements.","status":"disputed","published":"2020-01-20T20:15:11.317Z","modified":"2026-06-17T03:24:34.327Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:05:52.385274Z"}]}}