CVE-2019-3921

HIGH 8.8CVE-2019-3921 · Published 05/03/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code.

References

exploit-db.com/exploits/46469 · Exploit
tenable.com/security/research/tra-2019-09 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free