Read the docs

Al-enterprise

Records5All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Al-enterprise records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in 8008 Firmware · all components

Priority MEDIUM 40

On the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50.13, a command injection (missing input validation) issue in the password change field for the Change Password interface al…

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02803 Published 2019-08-01 No fix listed CWE-78
Open these records in search →