CVE-2019-3921

ALTO 8.8CVE-2019-3921 · Published 05/03/2019 · updated 17/06/2026

In breve

CVE-2019-3921 è una vulnerabilità ALTO (CVSS 8.8).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 17.9%, superiore al 97.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code.

References

exploit-db.com/exploits/46469 · Exploit
tenable.com/security/research/tra-2019-09 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free