high8.8Public exploit code
CVE-2019-3921
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a rem…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alcatel-Lucent (Nokia) GPON I-240W-Q - Buffer Overflow2019-02-28 · remote · hardware
Impact
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokia | I-240w-Q Gpon Ont Firmware | Version 3fe54567bozj19 |