CVE-2019-3921

Summary

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code.

Affected Software

Weaknesses

• CWE-121: CWE-121: Stack buffer overflow

ADP Enrichment

CVE Program Container

Additional References

• https://www.tenable.com/security/research/tra-2019-09
• https://www.exploit-db.com/exploits/46469/

References

• https://www.tenable.com/security/research/tra-2019-09
• https://www.exploit-db.com/exploits/46469/

• ←Previous
• Next→