Read the docs

Nokia

Records169All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high72CVSS 7.0–8.9

Exploited now

Nokia records in CISA KEV

No Nokia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Netact 12 records HIGH 1350 Optical Management System 10 records MEDIUM Hit 7300 Firmware 7 records MEDIUM Impact 7 records MEDIUM Network Functions Manager For Transport 7 records MEDIUM G-040w-q Firmware 6 records MEDIUM I-240w-q Gpon Ont Firmware 6 records MEDIUM Mantaray Nm 6 records LOW

Records

6 records in I-240w-q Gpon Ont Firmware · all components

TI-2019-02927 CVE-2019-3921 · GHSA-c4vw-m533-crpc

Stack-based buffer overflow in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 56

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.17891 Published 2019-03-05 No fix listed CWE-121
TI-2019-02928 CVE-2019-3922 · GHSA-j9q7-p3q3-f2xh

Stack-based buffer overflow in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 50

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05238 Published 2019-03-05 No fix listed CWE-121
TI-2019-02924 CVE-2019-3918 · GHSA-cqmp-xjvq-p8g6

Hard-coded credentials in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 46

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01979 Published 2019-03-05 No fix listed CWE-798
TI-2019-02926 CVE-2019-3920 · GHSA-mr6w-w4mw-jjp4

OS command injection in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 45

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?scrip…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03908 Published 2019-03-05 No fix listed CWE-78
TI-2019-02925 CVE-2019-3919 · GHSA-vc4q-vr75-r5hq

OS command injection in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 45

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usb_restore_Form?script/.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03908 Published 2019-03-05 No fix listed CWE-78
TI-2019-02923 CVE-2019-3917 · GHSA-73qj-jvv4-77jq

Missing authentication in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority LOW 37

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to enable telnetd on the router via a crafted HTTP request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02353 Published 2019-03-05 No fix listed CWE-306
Open these records in search →