Meinberg Security Advisory: [MBGSA-2025.03] LANTIME-Firmware V7.08.023

Description of the Vulnerabilities

• Third-Party-Software:
  • OpenSSH:

    • CVE-2025-26465 - MITM when the VerifyHostKeyDNS option is enabled (medium)
      https://access.redhat.com/security/cve/CVE-2025-26465
      
      CVE-2025-26466 - memory/CPU denial-of-service related to the handling of SSH2_MSG_PING (medium)
      https://access.redhat.com/security/cve/CVE-2025-26466
      
      https://www.openssh.com/txt/release-9.9p2

      Fixed in:
      V7.08.022 MBGID-22017

  • libxml2:

    • CVE-2025-24928 - stack-buffer-overflow in xmlSnprintfElements (high)
      https://access.redhat.com/security/cve/cve-2025-24928
      
      CVE-2024-56171 - use-after-free after xmlSchemaItemListAdd (high)
      https://access.redhat.com/security/cve/cve-2024-56171

      Fixed in:
      V7.08.022 MBGID-22124

  • libexpat:

    • CVE-2024-8176 - libexpat can be forced to recurse indefinitely (medium)
      https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes
      https://access.redhat.com/security/cve/CVE-2024-8176

      Fixed in:
      V7.08.023 MBGID-23635

Systems Affected

All LANTIME firmware versions before 7.08.023 are affected by the corresponding vulnerabilities. The LANTIME firmware is used by all devices of the LANTIME M series (M100, M150, M200, M250, M300, M320, M400, M450, M600, M900) as well as all devices of the LANTIME IMS series (M500, M1000, M1000S, M2000S, M3000, M3000S, M4000) and the SyncFire product family (SF1000, SF1100, SF1200, SF1500) and LANTIME CPU Expansions (LCES).

Whether and to what extent individual clients or LANTIME systems are vulnerable depends on the individual configuration, network infrastructure, and other factors, and it is therefore not possible to provide a general statement on how vulnerable a given system in use actually is.

Possible Security Measures

The relevant security updates are included in the LANTIME firmware versions 7.08.023(-light). Updating to these versions eliminates the listed vulnerabilities.

Download the latest LANTIME firmware at:

• Meinberg LANTIME Firmware

All updates are now available for Meinberg customers. An update of the LANTIME firmware to the version 7.08.023 respectively 7.08.023-light is recommended. Clients who cannot install version 7.08.023 should install version 7.08.023-light instead.

Further Information

Further details and information are available from the following website:

• LANTIME Firmware Changelog: LTOS 7.08

If you have any questions or need assistance, please, do not hesitate to contact Meinberg’s technical support team.

Acknowledgments

We would like to express our gratitude to all those who have advised us of vulnerabilities or other bugs, and have also suggested improvements to us.

Thank you!