Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Nokia Component: I-240w-q Gpon Ont Firmware Clear all filters
TI-2019-02928 CVE-2019-3922 · GHSA-j9q7-p3q3-f2xh

Stack-based buffer overflow in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 50

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05238 Published 2019-03-05 No fix listed CWE-121
TI-2019-02927 CVE-2019-3921 · GHSA-c4vw-m533-crpc

Stack-based buffer overflow in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 56

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.17891 Published 2019-03-05 No fix listed CWE-121
TI-2019-02926 CVE-2019-3920 · GHSA-mr6w-w4mw-jjp4

OS command injection in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 45

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?scrip…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03908 Published 2019-03-05 No fix listed CWE-78
TI-2019-02925 CVE-2019-3919 · GHSA-vc4q-vr75-r5hq

OS command injection in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 45

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usb_restore_Form?script/.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03908 Published 2019-03-05 No fix listed CWE-78
TI-2019-02924 CVE-2019-3918 · GHSA-cqmp-xjvq-p8g6

Hard-coded credentials in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority MEDIUM 46

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01979 Published 2019-03-05 No fix listed CWE-798
TI-2019-02923 CVE-2019-3917 · GHSA-73qj-jvv4-77jq

Missing authentication in Tenable Alcatel Lucent I-240W-Q GPON ONT

Priority LOW 37

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to enable telnetd on the router via a crafted HTTP request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02353 Published 2019-03-05 No fix listed CWE-306