CVE:CVE-2014-5417
CNNVD:CNNVD-201411-004
Meinberg Radio Clocks LANTIME M-Series Servers是德国Meinberg Radio Clocks公司的LANTIME M系列的NTP服务器（计算机时间同步化）产品。
Meinberg Radio Clocks LANTIME M-Series设备6.15.019及之前版本的Meinberg NTP Server固件中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade meinberg ntp_server_firmware to a higher version than -; Upgrade meinberg lantime_m100 to a higher version than 6.15.0.19,and avoid the version (,6.15.0.19]; Upgrade meinberg lantime_m200 to a higher version than 6.15.0.19,and avoid the version (,6.15.0.19]; Upgrade meinberg lantime_m300 to a higher version than 6.15.0.19,and avoid the version (,6.15.0.19]; Upgrade meinberg lantime_m3000 to a higher version than 6.15.0.19,and avoid the version (,6.15.0.19]; Upgrade meinberg lantime_m400 to a higher version than 6.15.0.19,and avoid the version (,6.15.0.19]; Upgrade meinberg lantime_m600 to a higher version than 6.15.0.19,and avoid the version (,6.15.0.19]; Upgrade meinberg lantime_m900 to a higher version than 6.15.0.19,and avoid the version (,6.15.0.19]