CVE-2019-3920CWE-78

CVE-2019-3920: vulnerability in Tenable Alcatel Lucent I-240W-Q GPON ONT

Published · Updated

Follow this CVE+ Monitor Alcatel Lucent I-240W-Q GPON ONT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.9%
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/.
Affected products
Tenable · Alcatel Lucent I-240W-Q GPON ONT
Related CVEs — Tenable Alcatel Lucent I-240W-Q GPON ONT

In the same product, most dangerous first.

CVE-2019-3921—CVE-2019-3921EPSS 17.9%CVE-2019-3922—CVE-2019-3922EPSS 5.2%CVE-2019-3919—CVE-2019-3919EPSS 3.9%CVE-2019-3917—CVE-2019-3917EPSS 2.4%CVE-2019-3918—CVE-2019-3918EPSS 2.0%