What is the CVSS score of CVE-2014-5417?

CVE-2014-5417 has a CVSS 2.0 base score of 7.5 (High). CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 2.6%.

Ntp Server Firmware CVE-2014-5417

HIGH

Cross-site Scripting (XSS) (CWE-79)

2014-11-05 ics-cert@hq.dhs.gov

XSS Ntp Server Firmware Lantime M100 Lantime M200 Lantime M300 Lantime M3000 Lantime M400 Lantime M600 Lantime M900

7.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:P/I:P/A:P

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Nov 05, 2014 - 11:55 cve.org

HIGH 7.5

DescriptionCVE.org

AnalysisAI

Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected products include: Meinberg Ntp Server Firmware, Meinberg Lantime M100, Meinberg Lantime M200, Meinberg Lantime M300, Meinberg Lantime M3000.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.