CVE-2019-20048

HIGH 7.2CVE-2019-20048 · Published 27/12/2019 · updated 17/06/2026

In short

CVE-2019-20048 is a HIGH (CVSS 7.2) vulnerability affecting omnivista 8770 (al-enterprise).
Chance of exploitation in the next 30 days (EPSS): 5.8%, higher than 93.1% of all vulnerabilities.
Fix: update to 4.1.12 or later.

Package	Affected versions	Patched versions
omnivista 8770 al-enterprise	`< 4.1.12`	`4.1.12`

Description

An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. An authenticated remote attacker, with elevated privileges in the Web Directory component on port 389, may upload a PHP file to achieve Remote Code Execution as SYSTEM.

References

git.lsd.cat/g/omnivista-rce · Exploit
packetstormsecurity.com/files/155595/Alcatel-Lucent-Omnivista-8770-Remote-Code-Execution.html · Exploit
al-enterprise.com/en/-/media/assets/internet/documents/sa-c0065-ov8770-rce-vulnerability-en.pdf · Vendor Advisory
exploit-db.com/exploits/47761 · Patch

More vulnerabilities in omnivista 8770

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free