CVE-2019-3921
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 18%
from disclosure to weapon0 days
Published on NVDMar 5
1st PoCFeb 28
exploitation probability
18%top 3% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code.
Affected products
Tenable · Alcatel Lucent I-240W-Q GPON ONTpublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/46469unverifiedcve_referencewww.exploit-db.com/exploits/46469/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.