CVE-2016-1548

CVE-2016-1548 describes a vulnerability in NTP 4.2.8p4 and earlier, and NTPSec, where an attacker can spoof a legitimate NTP server packet to manipulate a client's time synchronization. This can lead to the client rejecting all future legitimate server responses and potentially forcing it to move its time. The vulnerability has a CVSS v3 score of 7.2 (High), indicating a network-based attack with low complexity, requiring no user interaction, and potentially impacting confidentiality and integrity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has received some community discussion and media coverage, suggesting awareness within the cybersecurity community.