CVE-2019-3920

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/.

Score

CVSS 3.1 8.8 High

Status

Modified - vulnreport@tenable.com

Published

2019-03-05

Last modified

2024-09-17

Weaknesses

CWE-77, CWE-78

Affected products

• I-240w-q Gpon Ont Firmware (Nokia)
• Alcatel Lucent I-240w-q Gpon Ont (Tenable)

References

• https://www.tenable.com/security/research/tra-2019-09