CVE-2017-16786

CVE-2017-16786 is a medium-severity vulnerability affecting Meinberg LANTIME devices with firmware prior to 6.24.004. It allows authenticated attackers with specific privileges to read arbitrary files via two distinct vectors: the ntpclientcounterlogfile parameter or through the firmware update functionality leveraging curl's "file" schema. The vulnerability has a CVSS score of 6.5, indicating a network-based attack with low complexity, requiring low privileges, and resulting in high confidentiality impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.